And note that the most serious security bugs in widespread software[1] are typically exactly these common errors. Eliminating them would have prevented nearly all of the remote execution bugs in history.

1: Widespread meaning OSes and popular platforms, not custom LOB apps where SQL injection exists on the login page.