But that’s the whole point. By doing all these security steps they can say to the regulators and courts“ see we did all these security layers edi still the user get scam so it must be user error”