That's a different subject. I was only addressing the notion that Ethereum the application is at risk from the code that users run on it.

I completely agree that the tools and processes for writing and testing smart contracts need to improve.