> Loving flaws like buffer overflows looks more like a Stockholm syndrome to me:

Only if you are the developer (victim ) it is fun to work with buffer overflows if you are the security researcher (law enforcement) or a hacker (kidnapper )