Form Follows Function. Security Follows Form.
Security people often reach for phrases like "security through obscurity", resting on the idea that strength comes from hiding flaws behind layers of complexity. Real strength comes from clarity instead. Architecture already has a name for that principle: "Form follows function". This comes from modernist design, where an object's shape grows out of its purpose rather than being added on top of it. A designer working this way builds from what the object needs to do, and the function shapes the form, so the result tends to be efficient, and often beautiful because of that efficiency. Security needs to follow the same logic, growing directly out of how a system is built rather than sitting on top of it as an afterthought.
I call this "security follows form".
An architect who wants a strong building puts the strength into the frame itself. A secure system works the same way, with its defenses built into the design from the start. A system that's clear and logically built carries its own security as part of that structure, the way a well framed building carries its own weight. Stacking firewalls, access controls, and extra tools on top of a weak underlying design creates blind spots and misconfigurations, and each added layer gives an attacker more surface attack and to search for the one flaw that lets them in. For this to work, you need to strip a system down to what it actually needs, and then give each remaining part one clear job, so every interaction stays deliberate and visible. That combination is what makes a system hard to break.
This is the idea behind Security Brutalism. Most design trends push toward sleek, polished interfaces that hide their inner workings, while brutalist security keeps every control and mechanism visible and intentional, so the structure itself carries the defense and stays open to inspection. That openness protects the system, because a flaw has nowhere left to hide inside a structure built this simple. The strength comes from simplicity built in from the start rather than added after the fact.
Modern security needs a floor solid enough to stand on when something goes wrong. It needs Security Brutalism.