Regarding your first point, the flaws are almost always in the implementation, not the design, though specs inevitably leave too much to the implementation. Re

Regarding your first point, the flaws are almost always in the implementation, not the design, though specs inevitably leave too much to the implementation. Regarding your second point, security works in layers. Much like it's better to have two locks than one.