The essence of defensive design is to anticipate how users might try to use a system in a malicious way.