Twelve stated residual risks, including: the privacy filter is heuristic,
email is the response transport, vouches are only as strong as the
patient’s out-of-band recognition (deepfakes are real), and the host’s
root secret is concentrated. Which of these worries you most, and which
mitigation would you prioritize?