The study likely assumed that people already familiar with working in these methodologies were equally available, equally happy to do so, and equally priced as regular developers, which is unlikely to be case. A certain minimum team size is probably required to make many of these processes viable; many real world systems are written by solo coders. Also, in reality it is relatively trivial to scavenge work like seL4, Linux kernel security toolkits, software HA clustering and&#x2F;or proxy implementations, hardware watchdogs, ssss and&#x2F;or distribute infrastructure across disparate locations to provide what probably amounts to magnitude higher redundancy and resilience against real world attacks or component failures without paying those costs. Indeed, the implementation of such is becoming near free many cases due to convergence on SoA&#x2F;microservices.<p>To put this more plainly, &quot;I can get another if I break it, so a clay cup trumps a grail.&quot; - Mirza Asadullah Khan Ghalib, classical Urdu and Persian poet from the Mughal Empire ... quote #1 in my fortune db @ <a href="https:&#x2F;&#x2F;github.com&#x2F;globalcitizen&#x2F;taoup" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;globalcitizen&#x2F;taoup</a>