It kinda sounds like increasing from AES-128 to AES-256 as a mitigation when the actual threat is social engineering.

So people need to provide retinal scans now - and how does that prevent thugs from robbing/coercing them shortly after?