I share his sentiments. We keep layering more and more gloop on the web. It will always be a game of wack-a-mole. It's like Windows requires TPM, but then giv

I share his sentiments. We keep layering more and more gloop on the web. It will always be a game of wack-a-mole. It's like Windows requires TPM, but then gives itself permission to snoop at your files. Or we have oauth, but then github is cracked to reveal the private keys. And so on and so forth, etc. ad nauseam. The clowns at Microsoft, Facebook and Google simply can't be trusted. They've proven that time and time again. Security is better obtained "via negativa" (to quote from Taleb). Be parsimonious in what you allow. Keep things simple. If you don't really need security, then don't have it.