Security is an onion, honestly you want both layers to be as hard as possible.