>The documentation currently just says 'avoid typos'.

So their security model is basically the same as with C: "do it perfectly the first time."