wright's principle

Named after Joshua Wright, the principle states: security does not improve
until practical tools for the exploration of the attack surface are made
available.