I dunno, people seem to accept most kinds of tool being fussy or flaky.

But the special thing about security flaws is that they turn a one in a billion error into a guaranteed attack. It's moderately hard to make something that doesn't feel buggy, but ridiculously hard to be secure. If you hold to the standards of a bake sale it's the former. If you want full security then nobody releases anything outside very strict contracts.

Thankfully industry is changing,

- https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32...

- https://www.nsa.gov/Press-Room/News-Highlights/Article/Artic...

And I could keep listing several other world regions.