I prefer a security model slightly more robust than "None of the professionals working on this project will ever make a mistake".