Are there really any “omissions” in your security measures?