> you should have described which security properties you want, your threat model is etc.

I do not know whether it applies in this case, but I know from my experience in other areas that it is not uncommon for objections of this type to demand a specificity that is not actually necessary for a good answer to be given - and undue specificity means that fewer related questions can be redirected to its answer.