We should definitely be constantly asking, "Is my protocol safe?" But, a better question is: "Is my protocol robust?"