Everything is done on device and the device is sealed tight enough to make hacking impractical for everyone except for state level actors.