2. I'm not claiming that all attacks will be mitigated, but that this is an easy win from a cost:benefit analysis.