A technical analysis challenges Meshtastic's marketing as a 'secure off-grid' solution, arguing security is a system property, not a feature checkbox. The article outlines a realistic threat model for the LoRa-based mesh network, focusing on actors, attack surfaces, and operational realities that matter in actual deployments.

The threat actors range from curious locals with scanning devices to sophisticated adversaries with RF equipment for wide-area monitoring. Core attack surfaces include the physical proximity of LoRa radios, the broadcast nature of the mesh, key management risks, and routing exploitation. These factors drive real compromise scenarios beyond simple eavesdropping.

While Meshtastic uses application-layer encryption, the analysis contends it's necessary but insufficient. Encryption doesn't guarantee integrity of routing tables, confidentiality against RF monitoring, resilience against traffic analysis, or protection against jamming. Security planning must address operational realities like physical node compromise and key distribution in the field.