The Crocus City Hall attack blindsided Putin’s vast security state. Employing nearly a million policemen, 340,000 national guards and over 100,000 spies, that apparatus has proved ruthlessly efficient at terrorising babushkas bringing flowers to Aleksei Navalny’s grave, tracking down lone bloggers and persecuting homosexuals. But as the Crocus attack demonstrated, the Kremlin’s securocrats are utterly incompetent at doing their actual job, which is to protect the lives of Russian citizens.