Claude just told me "Real security comes from: proper rate limiting and attempt monitoring, not just entropy"