Considering the stories you can read in the security engineer handbook[1] written by FAANG security engineers I’m willing to believe that.

[1]: https://securityhandbook.io/