a simple BIOS/UEFI setting change, or windows update could trip the Secure Boot settings
they could work around that though, but I still agree that backing up the passphrase to an arguably safe online system is good
the above tl;dr forgot something massive: all current protocols are unsafe (e.g. need exporting the entirety of org.kde.* in dbus) and/or only work on X11
wakamo and npc girl are lesbians????