It's amazing how much security policy relies on the bad guys being dumb.