It's the lack of process that will get you pwned, not the model.