What a robbery taught me about validating assumptions in UX