My “other side of the coin” is: as a designer of a system, never explain how they work, just tell people it is smart and that they should not assume otherwise since they don’t know how they work. And then go back swimming in your giant vault of money saved by skimping on security.