security trade-offs