This is a great point. We always focused on safety critical applications when I was in school but security is another area where having a clear and consistent architecture is a hard requirement. This is a great example of an area that would benefit from having an analyzable framework in place.