"Programming from first principles" doesn't solve security problems, in fact security problems in this case come from being ignorant of best practices and indus

"Programming from first principles" doesn't solve security problems, in fact security problems in this case come from being ignorant of best practices and industry experiences. You would _want_ programmers to use established techniques to avoid this problem. Of course developers should always understand what their code is doing though.