This is a useful mental model for the different security options & their vulnerabilities. It goes without saying that if you should be at least level 4. Any personal information should be behind level 5+. If you're interested in security I strongly encourage you to sign up to Daniel's "Unsupervised Learning Community".

I'm half tempted to turn this into some kind of bingo card.

This is a good jumping off point for group decision making. It gives 4 techniques, from consensus to authority, that can be applied. The real skill is appreciating when each is applicable. The pendulum analogy isn't quite right for me: it's more like a Swiss Army knife, where you pull out the blade to suit the situation.