From HN: my threat model doesn't really include competent .us.gov actors.