I think the way the code is implemented and managed plays as a big a part as the code itself. Look at how many large-scale breaches are caused by weak wifi pass

I think the way the code is implemented and managed plays as a big a part as the code itself. Look at how many large-scale breaches are caused by weak wifi passwords and other dumb, correctable things. I made a comment to the same effect, I would like to see rigorous research on what causes breaches and highest-impact mitigation strategies.