Over the past decade, security leaders invested heavily in two ideas: that bots were bad and users were predictable. Bot ...