Another illustration of the classic thesis "security should be built from the ground up and can't be added later". Also shows the importance of minimizing the a

Another illustration of the classic thesis "security should be built from the ground up and can't be added later". Also shows the importance of minimizing the attack surface. Would love to hear some inside stories about discussions that ultimately led to these implementation decisions.