Built-in security is always best. That's "security by design" but when that fails (due to mistakes, oversight, humans), built-in security steps up...or, um, in.