The question here is whether option 2 is implemented on the edge device (which in turn makes it more likely that someone can steal your identity) or goes over a government owned server (which means the government could soy on you)