I think part of the problem is the attitude that if your hardware is compromised so is the software, so you don’t need to account for the more insane inputs. After all, at least it doesn’t make much sense to have a device send special packets to cause DOS when it can for instance just blow up the system by causing electrical overload.

Still better to have these issues fixed.