state exchanges are not secure