Users are often the weakest link.