Outdated security practices, like certain password policies, can create more problems than they solve.