The base of science : critical thinking as opposed to expertise and "commonly accepted wisdom". Trust, but check. And if cannot check, I cannot trust. Their

The base of science : critical thinking as opposed to expertise and "commonly accepted wisdom". Trust, but check. And if cannot check, I cannot trust. Their map (model) is very nice, very detailed and self consistent. But is is not the territory (implementation) and the more complexity we stack the greater we prove the map diverge from the territory. And also the less it can be audited. Don't expect normal people to trust what they cannot check. It is faith security experts are expecting from users, not trust. I do my part of the contract as stated by common accepted risk management "best practice" regarding computer security. I do not trust blindly.