[strogonoff]

Such a model would look extraordinarily compelling to rely on all the time for all purposes, all the while remaining capable of being false in a critical and very difficult (impossible with technology of the time) to detect way.

I’d rather prefer a Unix way: a plurality of explicitly more limited but more numerous and conceptually diverse models.