@lrvick (oh! was this directed at the inputstick thing?)
and yeah! it's a very similar sitch--with the primary possible point of failure being the bluetooth connection between the inputstick and the phone
but besides that, it means you never put your database onto anything you don't trust, even if you went to authenticate to something on it