> People should consider the fact that they likely haven't thought about this nearly as much as us. There are good reasons for why we designed this feature the way we did and it's working as intended in the real world.

Wow, could that be more tone-deaf and insulting?

The fact is that the way the feature is implemented has a very serious issue. It sounds like the main problem is the TEE, and perhaps there's no way around it (which, in my mind, means that using the TEE comes with a real downside that needs to be considered). Regardless, it's a serious problem that -- at a minimum -- users should be warned about.

Isn't it missing the human element? Usually people who inspect you aren't the most skilled and best equipped. A decoy profile would be great to evade escalation. They see something benign and move on. This feels like an n-th time tech people think in absolutes instead of stepping back to check their assumptions.