>Putting up walls in the form of code signing, TPMs, rate limiters, password hash functions designed to slow down iterative guessing, aren't vulnerabilities in

>Putting up walls in the form of code signing, TPMs, rate limiters, password hash functions designed to slow down iterative guessing, aren't vulnerabilities in waiting. It's all about threat models. If you're trying to protect your data from the government, anything that allows anyone but you to access the data is a vulnerability. Very few systems try to contend with such a threat model because it's really hard to defend against, and most people don't care about keeping their data from the government. Seamless updates are way more important to them.