When half that security is aimed against the user it's pretty easy to cheer for cracks in it.