I really hope that in the future such bridges can run in secure enclaves to protect the re-encrypt step.