No Authentication is better than broken authentication