> there is nothing wrong with viewing users as potentially adversarial There is a world of difference between considering users adversarially (social engineeri

> there is nothing wrong with viewing users as potentially adversarial There is a world of difference between considering users adversarially (social engineering is the most common threat vector bar none) and considering kiosk escape a serious threat.