The other two are some of the most basic concepts possible (literally first semester, if not first week of CS) in the design of anything that has to do with a p

The other two are some of the most basic concepts possible (literally first semester, if not first week of CS) in the design of anything that has to do with a password. There are still ways this can fail: e.g. tech lead on a team full of good but uninformed bootcamp devs with an absentee manager and a domineering PM, run as a democracy when only a minority have (formal or self-taught) CS education. If the PM doesn't like your recommendation they'll get one of the bootcampers to do a crappy job without telling you.