[arbus5672]

The specification of Elicitations begins with

> Servers MUST NOT use elicitation to request sensitive information

For any LLM based flows to gain enough trust by the general public to handle flows that involve money, esp large sums of money, we need the equivalent of “pad lock on my browser means I’m secure” level of something easy to understand and teach everyone to see.