A 2026 study decoded 315,320 client-side reasoning blocks. The durable lesson is that encryption needs identity, context, expiry, and replay controls.