&quot;Half-implemented feature&quot; is so awesome for plausible deniability. You can leave blatant security holes in and be like, &quot;yeah, I never got around to fixing that since we stopped developing the feature,&quot; when elsewhere those flaws would be suspected of being an intentional backdoor.