The hardware is buggy, the software is buggy, users are buggy. They convince you the combination is "secure". https://www.theregister.co.uk/2017/08/17/rowhammer_for_nand_flash/ Rowhammer RAM attack adapted to hit flash storage