@gsuberland I have seen a lot of decent projects and products just curl up and die because they've had to add too much stuff.
A good example are some ICS devices - they have telnet and an enable password.
Someone adds a web interface. Now we have permissions. And user levels. And sessions. Some little shit like me tests it and finds loads of issues in the web interface.
