In the mental model of Solidity, when assert() fails, the programmer is broken, the Solidity compiler is broken, or Ethereum is broken. Anyone can call any contract on Ethereum, and none of the above applies. So revert()should be used.