I wonder[1]. Not disagreeing, and I'm not a systems programmer, so I can image that there are aspects of things to make something truly secure[1] that you have

I wonder[1]. Not disagreeing, and I'm not a systems programmer, so I can image that there are aspects of things to make something truly secure[1] that you have to chase down all these rabbit holes. I look at OpenBSD and see how long it takes them to do something fairly "simple", and use that as a guideline for security development integration timeframes. Of course, OpenBSD isn't backed by a trillion dollar company either. Oddly, I fall into the Mac + Linux camp. I love using MacOS (yes, even Catalina works for me), but I love that doing development/server stuff on Linux is so clean. What both do for me is minimize the brain clutter (and that's one reason I can't grok the idea of doing server development in Xcode). [0] - I don't think you're being naive. Also, being a fan of guys like Krebs on Security makes me realize that doing this right is not so much hard as it is painstaking. [1] - no, I definitely don't think iOS is totally secure, but I think it's harder to screw up as a user than competitors.