Our lead developers tried, and they are way smarter than me). No luck, for some reason customers don't consider this a vulnerability. Even ones who take security more seriously and do some external pentesting on our equipment.

I've found having smart people explain things can be a detriment. Sometimes it needs to be the dumbest explanation to get people to understand.

Smart people explain things with big mental steps they deem obvious (true or not), and less smart people disagree with these steps but are unable to point the finger on them.

Something like handing out keys to your villa to every subcontractor that ever visits your house?