Research like this does not touch on that issue because it’s completely unrelated. Why would someone trying to exfiltrate private data have to do key exchange?

Research like this does not touch on that issue because it’s completely unrelated. Why would someone trying to exfiltrate private data have to do key exchange? Moreover, if you try to enforce anything by placing a bump in the wire (the only thing defeated by this), you’re gonna lose every time. This “what if a bad guy has access to technology too!?” argument is tiresome.