How about: "This clearly isn't working. We have evidence of it not working." So needs to be shut down immediately because nobody agreed to this level of failur

How about: "This clearly isn't working. We have evidence of it not working." So needs to be shut down immediately because nobody agreed to this level of failure. From there the next argument becomes "This cannot work." I.e. there can be no adequate solution. But hey, if you disagree with that part and you've got a solution that you think /can/ work let's get it out there and analyse it and see if its worth the risk. Note that data in Cuxhafen (??) Germany won't be partitioned from your home town and stored in a different and differently secured database. So the weakest link in the weakest country is the one relevant to your data security. Please note I'm not agreeing with Krebs's argument here. I haven't got all the information to process it, nor have I had time, nor is this my area of expertise, nor do I have to have a firm opinion on everything. I'm just spelling out Krebs's argument because I really don't care for your summary of it. If you have a solution you think can work, let's hear it.