Once More on Safety vs Security

This fun piece by Robert Graham is a worthwhile read for a few reasons, and it has this fun quote:
'"Safety" is not "security". Safety protects against ACCIDENTAL problems, security protects against INTENTIONAL problems.' It also reminds us that fake experts are out there ...

Think the above when designing your security countermeasures: do they protect against the a) benign but gnorant b) evil but dumb/lazy or c) evil, smart and willing? Data loss or data theft? Kiddies or cybermafia? CVE or 0d-day? You get the point...