So in order to use a function that exposes the software to serious undue security risk unless used correctly, the engineer is pushed to do research? That really

So in order to use a function that exposes the software to serious undue security risk unless used correctly, the engineer is pushed to do research? That really doesn't seem like a bad thing...