Standard string comparisons exit on the first mismatched character, which is insecure.