Rohin Shah comments on Why don’t people use formal methods?