I suspect this is in the documentation, but I'll ask here anyways: what does Hoodie do with the browser-cached data when a user signs out? Is it entirely removed from the local machine, or does it persist so the user can login while the machine is still offline?
(I suspect there is an attack vector there, though I've not looked into it at all.)
(I suspect there is an attack vector there, though I've not looked into it at all.)