"Formal verification makes your code invulnerable against a very specific (though very powerful) attacker"