threat model: two more things contacts can do