When people think software tricking them into false sense of safety is a good security and then when some software is breaking that illusion then it's a "bad security practice"