MVC  lulls people into false sense of security