Re:Some Were Meant For C (2017) [pdf]
by thesuperbigfrog on Monday March 01, 2021 @03:45PM
(#26308150)
>> real life is never the theoretical best case
Exactly; real life C and C++ code that does real work tends to be insecure.
Anything can be secure (and conversely anything can be insecure). The theoretical potential doesn't matter because real life is never the theoretical best case. What matters is the overall risk (is liklihood * how bad < benefit?)