I’m intending to be transparent with what my device can and can’t do, unlike most vendors out there.

Also, using a proper SE, same as the ones in a lot of servers + security keys + ID cards etc.