to sort of repeat what syini666 said, i'd have to say the security. you have to find all of the possible holes and get rid of them, which could be very, very many, while the attacker only has to find one.