what is the threat model?


who are we protecting against

bored (albeit brighter/quicker than we) kids and high school hackers
criminals with Teleological Objectives
good guys, probably overworked
       (have you tried to configure a router lately?)

  relative threat of malice vs incompetence
   (damage * intention) product way higher for latter

   --> system just plain fragile