Or they can lull you into a false sense of security. (which is the reason chrom{e,ium} has removed their XSS auditor)
That applies to everything security related. "Don't review your source code for vulnerabilities, it may lull you into a false sense of security."
https://www.google.com/amp/s/www.zdnet.com/google-amp/articl...