![](https://lemmy.dbzer0.com/pictrs/image/e50eef23-13ad-45d2-9814-568c74d934b2.png)
![](https://lemmy.one/pictrs/image/0f5e05b5-d351-4add-9667-1df4c43091b4.png)
This is just called actually understanding your threat model and fully evaluating the controls available to you. Basic information security.
The most secure password policy in the world doesn’t matter if your users just write them down on sticky notes on their desks. Security on your end doesn’t matter if you’re sending the data to an insecure destination.
Same concepts apply to privacy.
And someone in your family at some point will take a picture of your kid and put it up on whatever the social media of choice is.