Convoluted prose and 'critical' security