It is often said that there are trade-offs between security and other desirable goals for a website, such as cost, performance, and ease of use. Can you give an example of how increasing security might make a website more costly, slower, harder to use, or impact it in other ways? What factors should an organization consider in deciding how much security should be applied to a site?