"if you don't know what you're doing don't do it" vs. "Secure out of the box"