introducting "Reductive Security" More software and applications, more code, more third party providers Inverse relationship between surface area and security