But the security gotchas matter more than you think ...