You're not crazy, but you assume everyone starts with security in mind. That is definitely not the case.