Thanks Steve. This strikes me as a reasonable recommendation, though it seems like generally the guiding metric should be whatever leads to fewer bugs and vulne

Thanks Steve. This strikes me as a reasonable recommendation, though it seems like generally the guiding metric should be whatever leads to fewer bugs and vulnerabilities (incl. tools, processes, etc).