Correct.

That, and security maximalism displayed in 3. and some comments in the HN thread.