Security vs. Surprise