We have this really great approach to security where we allow the adversary to infiltrate a huge portion of our infrastructure for years and at many different levels, and then we say “hm, maybe we shouldn’t be allowing this?”