I think maybe part of what he was saying is that the session gets abused -- devs sometimes put things in there which are not actually unique to the user, becaus

I think maybe part of what he was saying is that the session gets abused -- devs sometimes put things in there which are not actually unique to the user, because it's easy to do. And that's not even really an option here, unless it's a string.