I'm never going to forget the shock on the faces of my co-workers when I told them that by using reflection and looking at the bytecode/MSIL you can get pretty

I'm never going to forget the shock on the faces of my co-workers when I told them that by using reflection and looking at the bytecode/MSIL you can get pretty much anything that's in the executable. "But why does .NET allow you to access private fields? Isn't that a security hole in .NET?" They apparently based the security of their application on the assumption that an attacker cannot read private fields of their objects. Man, do I need to find another job.