> All the really bad security vulnerabilities were obvious.
All the really bad security vulnerabilities that were found were obvious?
One is more likely to find things that are obvious?
All the really bad security vulnerabilities that were found were obvious?
One is more likely to find things that are obvious?
Of course, they might not find zero-days but most hackers wouldn't find those either.