content: It is impossible to build any modern electronics simple enough that any human can understand it completely. As such, every engineer only knows a fraction of the whole system while building it.  Each engineer has the potential to introduce security flaws, yet lacks the knowledge to understand every potential consequence of their actions. I did a security audit of a processor a few months ago.  They were starting to secure processors (older ones had no real security), and one of their engineers had patented a way to make the crypto faster without needing lots of expensive in-chip hardware.  He was probably rather proud of himself, and they even hold a patent on that particular technique. I took one look at it, and went “here’s how it’s fatally flawed, and utterly destroys your security”.  I did so after reading one comment and never having actually touched the chip itself. The problem was ultimately that their hardware engineer was not a security engineer.  I have a software development background, and can be hired to write secure software, or hardware, but I’m very very expensive.    Companies don’t want to spend an extra $5m developing their product hiring people like me, and if they do, then they lose business to companies that don’t, and get their products out to market faster and cheaper. Then people like me break that security.