Changing programming platforms can be a security risk. Does that responsibility fall to the programmer or the manufacturer?