Comment by whiskey-one

Indeed, the user is the hardest part of the program to secure.