As always, depends on the threat model.