It's astounding that core security infrastructure isn't formally designed and certified, and isn't available as standardised - certified - drop-in elements. A

It's astounding that core security infrastructure isn't formally designed and certified, and isn't available as standardised - certified - drop-in elements. A top decile PhD thesis is not a high bar in engineering. It's how most disciplines evolve. "Not invented here" is not a credible explanation for why CS feels a need to be different.