I'm trying to see how managing a todo list on a server would ever be an issue. Sensitive information like that would never be stored in a todo list.