We’ve created a sprawling security apparatus with minimal checks, fuzzy oversight and a narrative of exception-making that runs wide and deep.