Cos we want to be able to blame the users when there is a data breach. :-)