It does have the downside of requiring "trusted computing" (aka iOS and Android) on the client though.