+1 If no password protection, then there should be a method to exclude certain results from search as minimum privacy. Best solution so far is to use OS X's autocomplete feature so that a phrase types out as "-tag:private", and do this every time. Why can't we just exclude a notebook from search, either permanently or with -notebook: syntax?