zlacker

Strcat does a much better job than I could to refute it: https://news.ycombinator.com/item?id=30761693

But basically, it is not secure neither on a hardware front, neither on software. The latter runs everything as the same user so a rouge bash script can encrypt your whole photo gallery, exfiltrate any data, etc.