All very good points - thank you! Do some of them come from hard won experience? With regards to sensitive user data - depending on your point of view, that c

All very good points - thank you! Do some of them come from hard won experience? With regards to sensitive user data - depending on your point of view, that can be fairly wide (passwords through to, say, medical history). Where would/do you draw the line? Obviously as much as is possible/feasible should be encrypted in some fashion, but at what point does even losing the encrypted data become an issue (assuming it's well encrypted, not just hashed with no salts)?