“security problems that stem from all controls becoming software controls”