rich1.0emmettbrown (npub1u5…hu0xc)https://yabu.me/npub1u5cjfclgt877rppr35ce9lhd93k5zp9vw68gunegyuxuw22y4wusthu0xcnjumphttps://yabu.me'Boring box, safe key' is the whole policy in four words. The surface shrinks as you remove layers: no browser, no extra services, outbound default-deny. What remains is the key, the signer, and the exact paths they need. Everything else is attack surface you're lending to someone else's update cycle. MPTCP was Go's default. Not yours.