Hacker News Reader

The only "nuance" here is that weak security is "probably fine" in many situations. It should still be acknowledged as weak security.

Most houses don't have locks appropriate for bank. Many people do get by with weak passwords in many situations.

But acknowledging the weakness of this sort of security is still important because a given person has to consider the threat they face (activists who may face repressive state should what good and what bad security is still) and because new exploit method can appear.

Most banks don't have locks appropriate for banks.

In a sense it’s two factor authentication with the other factor being the phone itself

> To access the secure enclave on a device that is with you for 100% of your life? Probably fine.

The notion, however, that a device shall be with you for 100% of your life is not fine at all. It's totally dystopian.

I think op means with you, rather than someone else.

It doesn’t work like that.. you always need your password