It is easier to destroy than to build.
Is it easier to discover a vulnerability than to introduce one?
Is it easier to discover a vulnerability than to introduce one?