@realcaseyrollins @feld it's inherently complicated but not inherently insecure, and that's what they're trying to convey with the necessity of verification of additional devices for accounts.
i think matrix has made this about as simple as they possibly can with existing encryption techniques