True! But reducing the scope of the device to just a few crypto primitives should allow much tighter control over the attack surface, at least...