"This risk can be minimized by formal verification through code audit and reputable security companies with good reputation."