Production reliability and user privacy are different goals. It’s true that a generally tighter ship will be better at both, but they are often in direct conflict. “Fail secure” is an outage waiting to happen.