No, parent just confuses "design" with "implementation", and asserts that "secure by design" (even if taken as more than a marketing slogan) implies 0 bugs. The logic is flawed, the conclusion is wrong, and the presentation is needlessly aggressive. Their comment history just confirms this.