A big caveat: much of this could be totally wrong. I’ll update it relentlessly when Apple tells us more.

Since this is a security system, the first question you should ask is: who’s the bad guy? The answer in this setting is unfortunate: everyone is potentially a bad guy. That’s what makes this problem so exciting.

source: green