A presence in the room that mostly stays quiet — and joins only when it can actually add something. Privacy isn't a policy here. It's the architecture.
Most of what happens in a room doesn't need an assistant. The ember only warms when it's asked — then settles back to white.
Send files straight to it with AuraConnect over Bluetooth — the few inches between you and the device. No server, no network path to reach it.
The distance between you and it is the whole security model. Presence, without surveillance.