post: YK + SSH update security thoughts

* More rambling on my reasoning.