Security which is only effective in the absence of an "attacker" isn't security. This is why we engineer for the worst case. As an aside: as a failure mode, I'

Security which is only effective in the absence of an "attacker" isn't security. This is why we engineer for the worst case. As an aside: as a failure mode, I'd rather see vote selling than punishment or torture.