Hacker News Reader

The thing that seems to be missing from your post is a list of examples of its security not being all that in practice.

I wouldn't say it's missing. I deliberately generalized. I mentioned RBAC as an example.

If people want to learn more there is no shortage of info. There was even a talk[0] at the 36th CCC.