The New Normal is Insecure by Default