[daeken]

Step 1 in security: Assume that every connection is untrusted. Now think of their model; does it hold up in that situation?