Thoughts on engineering, security, and complex systems