Federated Learning, Practically: The Protocol and What It Does Not Protect

What the federated averaging protocol actually does, which attacks secure aggregation stops, which it does not, and the deployment costs nobody mentions.