internal regions are where privilege escalation succeeds - **XDFTRAN=YES without a restrictive default profile is an open door** — undefined transactions will be allowed - **TSQ security is often overlooked** — TSQs frequently hold sensitive data during multi-screen transactions - **Certificate expi