On the other hand, its good to design systems where it wouldn't even matter if the hostile nation state knows exactly how it works.

This is a principle in cryptography, but carries nicely to other things.

I feel like this is always the best design whenever possible.