The part I had to rethink came while I prepared the public demo. Chat files and voice notes were being saved in a public folder, so anyone holding a direct link could open them. I moved them into private storage, and the app now checks who is asking before it hands a file over. If your customers send you documents, that check is the difference between a private conversation and an open one.