• People are lazy • Programmers are especially lazy • Adding annotations is too much work (except for security weenies) • Working on techniques for automating the annotation process