For completeness it should be noted that it doesn't cover all users interacting with the program. It only covers those who are "remotely" interacting with it.

I don't recall seeing any discussion of what counts as remote.