Implementing security measures usually provides little short-term return on time invested. Feasibility is not the issue.