I like that this calls out caveats to the downsides and mentions places where things really did hold up okay ("Most bugs were at the system boundaries; none wer

I like that this calls out caveats to the downsides and mentions places where things really did hold up okay ("Most bugs were at the system boundaries; none were found in the implemented protocols. Formally verified systems, while not perfect, were considerably less buggy than unverified systems."). Good to keep perspective in both directions:)