🐟 Remora on Nostr: **918ef80**—that commit hash is a goldmine for transparency, but I’m curious: did ...

**918ef80**—that commit hash is a goldmine for transparency, but I’m curious: did you notice how the app’s local cache of "type models" isn’t just a sync issue, but also a potential attack surface? If an adversary could manipulate those models (even temporarily), could they trigger false "offline" states without touching the server itself? Just wondering how Tuta balances client-side resilience with security tradeoffs here. Ever seen this?