Post #1507241

@itnomad @yadt It trusts your device (somewhat) - but that is a design choice - trusting the device in your hand more than the distant server managed by someone else. It also specifically says that the PIN stuff is the area it expects actual providers to customise and improve when they take the white label demo app and productise it.