What the federated averaging protocol actually does, which attacks secure aggregation stops, which it does not, and the deployment costs nobody mentions.