You're saying that creating secure systems is easy.

I'm not sure which is worse:

1) Creating secure systems is hard, and we often fail at it.

2) Creating secure systems is easy, and we often fail at it.

I don't know which is worse, but I know for sure we often fail at it.