So why are basic controls so good? Is it because they have been around the longest so are the most efficient & refined?Because they were the 1st controls & we mitigated the biggest vulnerabilities 1st? Is it that they affect the threat side of the risk equation by limiting threat actor targeting?

The OpenAi preprint on arXiv arxiv.org/pdf/2509.04664

But, I need to trust my computer to store my credentials (which I didn't have to before).

Honestly, it's a password manager where I don't get to pick the password.

Well, a whole bunch of different password managers.

Ultimately it's "do you trust you or do you trust your device more?" And probably in the future, "do you trust your genAI model?" I suppose for most folks, we do trust the device more. I still trust myself more though I think.