@yaxu@post.lurk.org obscurity is not security though, so it feels like you'd end up wanting to run these programs on a non-networked machine or take some other drastic measures to protect against accidental vulnerabilities (like drastically reducing code complexity in some way). On the one hand, if such communities remain marginal, maybe the combination of small size and extra attack effort can protect them. On the other hand, that's still a very flimsy assurance. I'm definitely a fan of abandoning the evangelical imperative.