Given this architecture diagram for a new peer-to-peer payment feature at Chime, where are the most critical trust boundaries?
