Government shouldnt dictate good security practice.