Absolutely. That's why overlay is not the default.
That's... uh, an interesting approach to security.
What is? Defaulting to the most secure method?