Neither. The security profile is the same, device is still used or managed by a human, and (most?) humans hate rubber hoses. (Therefore all security should be

Neither. The security profile is the same, device is still used or managed by a human, and (most?) humans hate rubber hoses. (Therefore all security should be based on the users preferences, as you can't protect a user 24/7)