The Internet was never designed with security in mind?

Interesting quotes from a Bruce Schneier book. It's news to me that the Internet was never designed with security in mind. As it does exactly what it was designed to do, deliver packets end-to-end. If you've got control of a BGP system then you can of course get up to all sorts of mischief.

“ Click here to kill everybody“ by Bruce Schneier Sep 2018

“The Internet was never designed with security in mind:“

“When the Internet was developed, what security there was focused on physical attacks against the network. Its fault-tolerant architecture can handle servers and connections failing or being destroyed. What it can’t handle is systemic attacks against the underlying protocols.“

“And even for relatively high-quality software systems like Windows, macOS, iOS, and Android, you’re still installing patches all the time.“

“Criminals have harnessed large numbers of hacked computers into bot, or zombie, networks.“

Notice how Schneier manages to not mention Windows in relation to bots and gives one mention to linux in the footnotes.

“Nearly all of us use one of three computer operating systems and one of two mobile operating systems.“

Still no mention of Linux or Open Source and just who in their right minds runs the DHS on Windows.

He does quote the Internet Engineering Task Force (IETF) from 1996:

“It is highly desirable that Internet carriers protect the privacy and authenticity of all traffic, but this is not a requirement of the architecture. Confidentiality and authentication are the responsibility of end users and must be implemented in the protocols used by the end users. Endpoints should not depend on the confidentiality or integrity of the carriers. Carriers may choose to provide some level of protection, but this is secondary to the primary responsibility of the end users to protect themselves.“

Yea, Confidentiality and authentication are the responsibility of end users, and all the rest is doom-and-gloom waffle.