A very rough security and privacy questionnaire

[martinthomson]

I'm trying to be as frank and direct about risks and costs as possible. It's very easy to spin this one way or other, with the goal of making the proposal seem more attractive. Though very common, I find that to be disrespectful of readers. This is already a hard enough topic to grok without the answers you need being obfuscated in that way.

[martinthomson]

Added text covering the "necessity" question I missed, as @eriktaubeneck pointed out.