If it is the way it is (unsecure), what does proof of intent matter?