I agree, I think a threat model is important here. It is all a spectrum.