We did tell it like it is. In the security reviews (note the plural; we have ongoing reviews). Here is the documentation from the initial public release: http

We did tell it like it is. In the security reviews (note the plural; we have ongoing reviews). Here is the documentation from the initial public release: https://wiki.mozilla.org/Security/Reviews/Identity/browserid https://wiki.mozilla.org/Security/Reviews/Identity/browserid Note all of the times we called out government actors as potential threats? With respect, it is easy to tuck tail and run (as in move to another country), it is much more challenging to dig in and try to change things. (Disclaimer, I work for Mozilla, on the security team, and I worked on reviews of Persona since its first design iteration).