Comment by chocoboaus3

You're right

but guess who advises that architecture and implements it... the principal developer/architect.

You can use good security tools, badly.