2) Some things very much need to never be on a wider network with untrusted nodes. This is easier than it sounds...