@whitequark This is true; but this opens up this kind of threat dramatically. Now even if you send something to someone you trust not to screenshot and keep receipts, their computer will do it for them, and their nosy partner, or boss, or parents, or roommate, or malware data scraper, could get in and extract that info.
@unlambda ... but nosy partners installing malware is already a part of my threat model?
(i've had several people tell me that they installed malware on the computers of their parents/enemies/exes/etc. in most of the cases this instantly identified them as awful beings, but that still only underlines the need to have it in my threat model)