Firstly, there has to be some way to get into the box if you forget your password. There is such a thing as too stringent security measures.

Secondly, if someone gets physical acces to the box,...