How far does one push that, though? Shouldn't a secure mode go pretty far into the secure side of the security/usability balance? Honestly, would a 'recipient

How far does one push that, though? Shouldn't a secure mode go pretty far into the secure side of the security/usability balance? Honestly, would a 'recipient key changed; resend message?' be the worst prompt in the world?