@tqbf everything in security is belt-and-suspenders, man. One set of "experts" will find completely different (and valid) things as another set of "experts". Solution: hire everyone, all the time.