The Hidden Cost of ‘Free’: Why Public Proxies Keep Breaking Security Models