Unnecessarily complicated APIs are a security code smell precisely because they help hide bugs, leaky abstractions, insecure state, and other exploitable issues.
Did I say they weren't? Not sure why I'm being downvoted here.
Did I say they weren't? Not sure why I'm being downvoted here.