The theory of what’s possible seems less important here than the practical reality of what the lowest common denominator is capable of, and what they will choose out of convenience.

The average person, or even the average developer, isn’t going to use homomorphic encryption or be on point with their opsec.