why is it the case? Security isn't a binary thing.