&gt;The number of people in industry who use either tool is incredibly small and is likely to remain so; developers spend 20-50% of their time on test suites and STILL don&#x27;t feel it&#x27;s cost-effective to write down formal specs, even in TLA+-style specifications.<p>How many zero-day security flaws have to occur in core infrastructure like, for instance, OpenSSH before the laziness of engineers about learning &quot;academic&quot; tools stops being a cost-effective excuse <i>not</i> to use formal methods?