Yes, but that’s not bad. It boils down to a threat model.