He says he wants it hackable and secure. I don't think he favors lock-in or throw it away when doesn't work.

The dilemma there seems how do you keep it quickly hackable for yourself but difficult to crack for the bad guys. What are your counterproposals if this is a nightmare?