“Either you need to understand the code or I need to be inside a runtime or something in order to get that level of visibility.”

Transcript evidence from Tony Turner -- Threat Modeling and SBOM.