It's a turd, if you want poor security you should make things so complicated that half the implementers have no idea what they are doing. We should have a kind

It's a turd, if you want poor security you should make things so complicated that half the implementers have no idea what they are doing. We should have a kind of LD50 for specs: How much feature cruft do you need for 50% of the test subjects to die.