Measuring protection: A cautionary tale