> But the difficulty of writing secure software is not about avoiding any one particular mistake; it's the sheer number of mistakes available to be made, so that it's easy for one mistake to slip through the cracks.

This may be pedantic.. but writing secure software as an individual is not that hard; writing secure software as a team and then publishing that as a product is almost impossible.