security risk tradeoffs