explain that weave security isn't as daft as it may first appear