Yeah, I often thing that way too, and I think this mindset in programming (and also financial engineering) of taking any little gap and maximally exploiting it

Yeah, I often thing that way too, and I think this mindset in programming (and also financial engineering) of taking any little gap and maximally exploiting it is very hard to deal with legislatively. It's hard enough to make a web form secure, trying to do the same with emergency response legislation, when the nature of emergencies is that they often take unforeseeable forms, is an intractable problem. I've been beating this drum quite a bit lately and I understand this feels impossible from where we are, it feels impossible to me too, but the problem we really have to solve is figuring out a way to trust and be trustworthy when given certain responsibilities. Not just for emergency powers, for everything. We don't have the technology to eliminate the need for trust, not even close. We have to work on constraining the threat model a little bit.