Human behavior is absolutely modelable - usefully, even ("all models are wrong but some are useful") - and people in security do it all the time. Moreover, eng

Human behavior is absolutely modelable - usefully, even ("all models are wrong but some are useful") - and people in security do it all the time. Moreover, engineers also design for resilience to human "attackers" in physical systems all the time. If anything, cybersecurity is easier because you can leverage the work of tens of thousands of other people in your tooling. You wanna re-write ssh or fail2ban yourself?