This point, "Unless your system was supposed to be hackable then it shouldn't be hackable." wasn't one of them.