Question 21) "Has the subject engaged in [...] tradecraft to hide their online activities contextually different from previous activity? [...] password-protected websites."
I don't think it's unreasonable to ask whether password-protected websites are only an issue if they are being used to hide online activities. Or is this a strict liability thing, where any use of a password protected website is taken to mean that a user is attempting to hide their online activities.
I don't think that's the kind of encryption they're referring to, since you cannot infer anything about an individual simply for using HTTPS websites (which will soon be the majority of the web).
