Right, but a ton of well-meaning but cure-is-worse-than-disease "Web Application Firewall" tools still block it