“The people whose job is to protect the user always are fighting an uphill battle against the people whose job is to make money for the company.”