I think having a system which is not insecure by design is better, it doesnt matter then if some poor code makes it into a system, it will be contained be defau

I think having a system which is not insecure by design is better, it doesnt matter then if some poor code makes it into a system, it will be contained be default before it can do any damage.