Some meandering thoughts on high-trust and low-trust systems, and the design choices they make.