> The default assumption ... to even contemplate such an architecture.

At the risk of being further down-voted, I couldn't agree with you more about this last paragraph. Alas my systems integration skills are not up to speed with implementing "end-to-end encrypted communication--and likely even peer-to-peer direct communication ... to the device in question", but I am thrilled to know that can be done. Are you able to cite any such systems/products where that is possible?