They wish to minimize risk and they want to impose counter measures that may poses some ability to show up vulnerabilities that will ultimately lead to risk, but if you impose counter measures will not. 