[palata]

Right.

> It increases attack cost because now the attacker has to fool both systems, but idk by how much honesty.

That's a fair question, but it may be better than you think, right? At least it seems pretty easy to increase that cost later on if they want to (e.g. securing their audit server or by having the clients check third-party servers). The technology is here now.