“What worries us with hardening the system is that to check if there are functional impacts, we will have to test. And to test, we will have to actually harden the system.”