Imagine you live in a house where you're told the smoke detectors are fake — some are real, some are decoys, and you'll never know which. Over time, you develop two possible responses: you either obsessively check every detector and wire your own backups, or you stop thinking about smoke at all because the house hasn't burned down yet. That's the core mechanism this paper maps onto digital security behavior among North Korean defectors living undocumented in China. The committed claim: compound surveillance threats — from North Korean intelligence services reaching across the border AND from Chinese digital infrastructure that ties identity to every transaction — produce two distinct habituation trajectories, not one. "Adaptive habituation" means defectors who acquire knowledge and progressively build protective practices. "Erosive habituation" means defectors who, in the prolonged absence of bad outcomes, gradually relax their guard. The paper argues this divergence is shaped by prior surveillance schemas carried from North Korea, attribution uncertainty about which threat actor is watching, and constrained agency as undocumented persons. Methodologically, this is a 19-participant semi-structured interview study — qualitative, not quantitative. The participants are North Korean defectors currently residing in China, one of the hardest populations on Earth to recruit for research. The authors identify three interrelated conditions that structure the threat environment: transnational surveillance pressure from the DPRK, identity-linked Chinese digital infrastructure combined with intermediary dependency (defectors often rely on brokers or contacts to access digital services they can't sign up for themselves), and threat reasoning shaped by surveillance schemas internalized before defection. The architecture is interpretive qualitative analysis, not computational. This sits in the usable security and HCI tradition — specifically the line of work examining how marginalized or at-risk populations reason about digital threats under conditions of information asymmetry and power imbalance. The closest methodological relatives are Sambasivan et al.'s work on South Asian women's digital safety, Warford et al.'s studies of intimate partner surveillance, and the growing literature on how refugees and migrants navigate hostile digital ecosystems. What distinguishes this paper is the compound threat model: defectors face simultaneous pressure from two state-level adversaries with overlapping but distinct surveillance capabilities. Integrity-wise, this is honest qualitative work with inherent limitations the authors acknowledge. N=19 is respectable for this population — you cannot exactly post a Craigslist ad for undocumented North Korean defectors in China. The validation is internal coherence and thematic saturation, not statistical power. There are no pre-registered hypotheses because this is exploratory qualitative research; the question is whether the coding and thematic analysis are rigorous, not whether p < 0.05. The IEEE S&P acceptance is itself a strong integrity signal — this is the top venue in computer security, and qualitative work has to clear a high bar there. The two habituation trajectories are the paper's real contribution to the broader usable security field. Most threat-modeling work assumes users either learn and improve or remain static. The erosive habituation finding — that the absence of visible adverse events can itself degrade security behavior over time — has implications well beyond this population. Think of any long-duration threat environment: corporate insider threat programs, journalist source protection, domestic violence survivors. The compound-threat framing (two adversaries, different capabilities, attribution uncertainty) is similarly generalizable. The obvious next study the authors didn't run is longitudinal: tracking the same individuals over 12-24 months to see whether adaptive habituators sustain their practices and whether erosive habituators eventually suffer consequences that re-trigger vigilance. The honest read is (a) — access constraints and the sheer difficulty of maintaining contact with this population over time made it impractical. A second gap is comparative: how do these trajectories look among, say, Uyghur diaspora or Tibetan exile communities facing structurally similar compound threats? That comparison would test whether the two-trajectory model generalizes or is specific to this population's particular surveillance history.
