Security by Design principles do not guarantee security. They are a mandatory aid to thinking, not a replacement for it.