Yeah, he&#x27;s full of it. We in high-assurance community and even the cypherpunks have been telling people forever it was being abused. Because people <i>were abusing it</i> and its design practically asked for it. These were ignored as externalities by people motivated by convenience, feature bloat, price, and&#x2F;or profit. Even getting it down to almost identical cost&#x2F;speed didn&#x27;t help if it lacked unnecessary feature X.<p>This was censorship by business and security communities plus apathy by consumers. Plain and simple. The business communities didn&#x27;t want to spend crap on INFOSEC. The ones that did faced two obstacles: (a) low volume meant real deal was ridiculously expensive with slower development; (b) mainstream INFOSEC conned companies with bandaids or fake security because they made more money that way. Constantly charging to fix problems they left in or upgrades people didn&#x27;t need.<p>So, result was everything is shit security and stays that way. Neither proprietary nor FOSS learn from lessons 99% of the time. All due to what Schneier always called &quot;perverse incentives&quot; that keep bad stuff produced.