Anything can be made trivially insecure if you don’t practise proper opsec.