> Not every program is intended to be connected to the internet or have user provided input.
While true, I think the vast majority of programs do do one of these two things (and increasingly, both), whereas the majority of programmers seem to think that what they work on "isn't a security issue".
It's this disconnect that is giving us the Internet of Crap. Your phone apps, your fridge, your video games, your text editor -- every program I interact with every day -- it's all a security issue
I agree, for many programs memory safety matters. But there are a large chunk of programs where it doesnt matter/is not worth the effort.