And by disclosing that amateurish procedure and a barely "anonymized" picture of one of their employees, they are basically inviting criminals to have a go at your third scenario. Part of professional security schemes is protecting your employees and their families. That's why money messengers don't have keys to the boxes they transport. That's why there are deposit-only safes.