Bartek Nowotarski

Let's wait for core team comments but I added a few now. > More granularity with the security thresholds. For example I can set different thresholds for different operations, but...

> The basic issue is that the signing app is not on the blockchain, hence it does not have the honesty guarantee that comes with being on the blockchain. Since...

Can't we just use public key of the account (account ID) for encryption? Recipient can then decrypt it using corresponding secret key of the account.

Sounds good. Looking forward to checking it!

@JannikGM I switched to CodeQL for finding this specific issue. Check this query: https://github.com/github/codeql/blob/main/go/ql/src/InconsistentCode/WrappedErrorAlwaysNil.ql

CodeQL is released under MIT license: https://github.com/github/codeql/blob/main/LICENSE