anchor: Without adequate awareness about the risks involved in disclosing sensitive information, users may volunteer information which can allow an intruder to circumvent otherwise well-designed access controls.
positive: Access controls are well designed but can be circumvented by irresponsible volunteers.
negative: There is no way for an intruder to to be involved with the sensitive information.