I think those are very good points.  Non-geeks have no idea, and it really doesn't matter, about JSON or SHA256 specifics.