It is kind of true that you should not _only_ rely on homegrown and not well-tested solutions because they may contain pretty trivial bugs. When using several l

It is kind of true that you should not _only_ rely on homegrown and not well-tested solutions because they may contain pretty trivial bugs. When using several layers of security, adding non-standard or home-grown layers may add significantly to the security considering widespread exploits of well-known software. E.g. use VPN and password protection and encrypted volumes which are pretty standard. Add in a custom hardware switch that physically disconnects the power/network of a server containing sensitive data which is rarely needed and you will be protected against many exploits.