The real issue with the security "protocol" was that directors and up were exempt from it, creating a two-class system. That's supposedly since been rescinded.