I am not an expert - just a user and an engineer working on this. I'm happy to ask one of our PMs to review it they know and understand the product a lot better than I do.

From reading the article everything "sounded right" but that's hardly an educated opinion since I only worked on _some_ parts of the product.

Actually - I think I'll ask our red team or security guid - that's also probably a good source.