After all the hard work, why do security gaps still exist?