“They attack people, not code,” an expert told The Post.