Somehow that statement just screams that our model is not useful for security work