Security vs. privacy? Where do we strike the balance?