Might be that none of that really matters. Figure out what security goals you want to meet for your use case and take the necessary steps to get there.