Hacker News Reader

Which part of the claim is nonsense and which tool is the parent trying to get people to switch to?

Everything should be considered 'insecure' unless formally verified (EAL7 etc.), and even then there may have been bugs in the verification process.

Security is not attained, it is practiced. It's not a state, it's a process.

Processes have rituals and tools. To improve security, we have to look for better ways of working. Of course no single tool is going to "fix" security. But some bring improvements which are so obvious that they cannot be disregarded.

This is the generally accepted position of security professionals.