Why do we prefer HMAC to the naive construction H(key || message) with a hash like SHA-256?
H(key || message)