The interesting technical takeaway here is that non-custodial architecture limited the blast radius exactly where it mattered: a compromised support system did not become a compromised Bitcoin custody system. The next layer is reducing the privacy blast radius too: strict retention limits, isolated support storage, least-privilege access, attachment encryption, egress monitoring and detailed audit trails. Security isn't only about preventing every breach. It's also about designing systems so that one breached component cannot compromise everything else.