@douginamug I think this is a necessary document to exist. Maybe a wiki page needs to be set up for this regardless. Understanding the specific threat model that we are trying to counter will help everyone...