Who argues against users taking responsibility? The users who demand exfiltration protection around the Recall DB? Or the commenters who maintain that extra protections are pointless?