Assuming the host computer is compromised is the only honest security model. Mk5 ships with that assumption baked in.