Security is hard because it has to be right all the time? Yeah, like everything else

The document presents a systems-oriented perspective on security, asserting that effective security emerges from clear assumptions, defense-in-depth, and well-factored architectures rather than reliance on cryptography alone. It compares security to other system properties like scalability and availability, highlights the importance of articulating requirements and risks, and advocates decomposing systems into components that work coherently end-to-end to enable evolution and resilience.