This is a really difficult to answer question because of the place in the stack this library inhabits. Buttplug only cares about accessing hardware, so while it

This is a really difficult to answer question because of the place in the stack this library inhabits. Buttplug only cares about accessing hardware, so while it may sound like a cop-out, our security model is "whatever the hardware gives us". Multi-user control systems would be built on top of the library, and that's where a good bit of the security work would happen. That said, there are some security/privacy features built into the architecture to reduce metadata dissemination, I'll be outlining those in the developer guide at some point.