and also, this is some non-obvious practice for people who are not security experts. They answer honestly because that's what they are asked