Identity Alone Isn't Enough: Why Device Security Has to Share the Load