It's about training your brain to spot the type of systemic holes. You can understand the general concept of, say, a side-channel attack but still fail to see a new opportunity to use it in a domain you're highly familiar with if you don't pour over the details of an attack like Spectre.