The law only cares about security, but manufacturers are free to do better than that.