doing enough protect users