[Aeolun]

I find that this is always easy to say from the perspective of the security team. Sure, it would be more secure to develop like that, but also tons more painful for both dev and user.

[timewizard]

I don't code anymore. I like making devs suffer. And this is all good for the user. ;)