Right, in a perfect world, where all code deployed to production (including third-party libraries, legacy code that hasn&#x27;t been touched in years, etc.) is free of security bugs, there&#x27;s not much benefit to CSP.