Im sorry, but how could this possibly be used as reason not to use an on-host harness? If you own the code, and control the supply chain, then this is not a problem- because you can read it. Weird comment.