“Our door lock is flawed, but the attacker would need physical access to the key”