I think this hack shines a light on the less-is-more approach to security. I can count on an OS or a compiler to not be hacked, but I can't add an unlimited amo

I think this hack shines a light on the less-is-more approach to security. I can count on an OS or a compiler to not be hacked, but I can't add an unlimited amount of "security software" because someone decides we need to do something to protect against vectors X, Y and Z and those are addressed by massive pieces of software that runs in sensitive locations such as "everyone's machine" or "our CI infrastrycture". It's just a very bad idea™. Unfortunately it's an idea that is going to be a very hard idea to get rid of (Right now my computer is running CarbonBlack, F-Secure AV, EgoSecure, CyberARK, and at least a couple of others I forget. I assume many of you on corporate machines have the same problem).