"When users forfeit control there is a risk of them losing some control over the security of their private state." . . . .