What can you do when a noted security expert dishes out bad security advice? I guess you can try thinking clearly.