Sounds a bit like trying to secure a prison cell by bolting a high-security chrome-vanadium lock to the wooden prison bars. There seems to be miles of leeway to fuck it all up in the "main application" - even with best practices (yeah right), no device will ever get supported indefinitely (by which I mean past five minutes - hey, look! Squirrel!)...