I'm not sure it was ever the case that the original assumption was that systems are secure until disproven. The claim is more than likely alluding to a combinat

I'm not sure it was ever the case that the original assumption was that systems are secure until disproven. The claim is more than likely alluding to a combination of techniques for breaking weak crypto (ie. sufficiently small keysize for brute force attack), or attacking the endpoints (backdoors, etc). This still doesn't seem like news to me, but hey, what do I know?