Having done this for a long time, I agree even more at the practical level - holding perfect Turing security to the side.

My priorities now are:

- Don’t use computers if you don’t have to

- if you do, keep complexity at an extreme minimum

- also minimize who needs to access it

- minimize data collection where possible for strictly the task you need it for

- Keep data mostly at rest and with as few stops when it does have to move

- End-to-end is your friend

- Where possible make everything transparent

- State machines for all the things