physical security is the weak link