TSA's approach reminds me of treating rampaging cancer with a series of bandaids. Or some programmers' work I've seen over the decades. Spaghetti code happens due to the belief that "you only need to fix each little bug as you discover it". TSA is making its counterterrorist program like an old fashioned COBOL spaghetti coder. That is: The program is sound, so no need to re-engineer. Just patch each little flaw you discover. And now that I think of it, this is ALSO the Microsoft approach to software security. Patch Tuesday. TSA wants to have its Patch Tuesday. And call it security quality assurance. And ignore all complaints because "what else can we do?"