Security unfortunately relies on users doing things at least somewhat right.