> This is patchwork at best and may slightly improve posture...they'll hunt for bugs in already published software, instead of demanding strong security princip

> This is patchwork at best and may slightly improve posture...they'll hunt for bugs in already published software, instead of demanding strong security principles for software engineering. :s/instead of/in addition to/g The correct approach is to do both.