4 ms·

Any security practice that addresses an insecure default state by starting with "you should never..." is doomed.