Simple settings, most on by default, can set you up for major security failure.