At what stage does it become an endorsement to use insecure architecture?