> If execution is the real attack surface, why do we still allow it to exist on user devices at all? A device that relies on external services to operate (outs

> If execution is the real attack surface, why do we still allow it to exist on user devices at all? A device that relies on external services to operate (outside of specialized devices such as communications) is one that is not suitable for any use case I have. There's far too much exposure to risk involved. Privacy and security risks, outage risks, risks of the service being discontinued, risks of having the provider get mad at and shutting you out, etc. You'd be at the mercy of the provider in terms of them changing things up on a whim or according to the current fad. It would require internet service, which is problematic in a lot of use cases. Also, presumably, the service would require regular ongoing payments. For me, this idea is a complete nonstarter.