On Sat, Oct 13, 2018 at 10:25 AM Nico Huber <nico.h@gmx.de> wrote:

So the result is probably that they work half an hour instead of 8
per day on the code that matters.

good summary. 

The most security critical code gets the least attention and no external security review. 

If this sounds crazy, well ... it is.