Comment by jamesaguilar

Those are programming design principles, not security principles nor natural laws. It does not do to assume that principles in one domain carry over to other domains.