Why Rocq is better than Lean for program verification