Why do you infosec people have to make things so complicated when simple answers are right there?