I think 2026 has been the year hacks that had been unlikely became inevitable. With ColdCard and other scenarios, what had been a slim chance of a vulnerability that only the most paranoid did the work to avoid became the difference between holding strong and losing funds or data. The shift has come, from "if" to "when". It's easier than ever to explain, in any context, why it's best not to give out information freely. Instead of a question of whether the person we give it to should have our ID, it's a question of how long it will be before their database gets hacked, which criminals will have the information, and what they'll do with it.