I’m not sure who you worked with, but I worked for several years with both engineers and the CTO, and I strongly disagree with your assertion regarding their engineering prowess. It is one of the most engineering focused companies I have ever worked at in ~25 years, and at least while I was there, the bar was high (and continued to rise during my tenure).
Security is hard, perfect security is impossible. You prioritize workload to the best of your ability, and hope you outrun adversaries. Sometimes, you will lose, and you have a plan for that. People are always the weakest link.
Integrations are brittle because integrating with thousands of APIs is hard, and APIs are constantly changing underneath the system. In my opinion, the core was robustly architected and implemented (although it has changed over time).
(head of security at a fintech, 10+ years security in financial services)
No comments yet.