It was 2. The exact bug that exposed the data wasn't really the point, since he assumes that everyone will eventually make some similarly awful mistake; the po

It was 2. The exact bug that exposed the data wasn't really the point, since he assumes that everyone will eventually make some similarly awful mistake; the point was that you should design things in such a way that when you discover your boneheaded mistake(s), the damage is less than it could be. I agree, though, that his habit of using particularly boneheaded mistakes as examples dilutes his main point, since a significant part of his intended audience will think, "Wow, I'd never make a mistake like that, so I don't have to pay attention to mitigating my mistakes like he does."