Security and privacy: Activation flows that minimize the amount of personal or device-identifying data collected are preferable. Vendors that use secure transport and store minimal license metadata reduce privacy risk.