Weak security improvements—including those you might make in your own life—are sometimes worse than doing nothing because they give false peace of mind and convince people that safety is being addressed when it is not. Poorly designed security fools everyone… except the attacker.