#[tantek]1rather, my point is more of a behavioral one, that unmaintainable security is in practice no security at all, because users care more about things mostly working and somewhat secure than about having things barely/rarely working and very secure