leaked key seems worse in that people will think they have this security measure working for them while they don't. Without this measure there is no illusion at least