“Protection by design, not by trust.”