Obviously your threat model informs this.
[1]: https://twitter.com/tqbf/status/862394778331361281
Reply on news.ycombinator.com