i”d love to understand this as well. it seems to boil down to how to secure the (un)encryption key, since unencrypted secrets in (volatile) storage should disap

i”d love to understand this as well. it seems to boil down to how to secure the (un)encryption key, since unencrypted secrets in (volatile) storage should disappear when the bulb is removed from power, and other secrets in long-term storage should all be encrypted by the one primary (un)encryption key. how do you secure this key? secure enclave seems to make it harder but not impossible (as kevin_nisbet points out).