Like everything in IT security, it's about your use case, threat matrix, and risk assessment.