Creating 100% secure software is not realistic. If you can't win, change the game. I'm not saying you should give up or that audits are a waste. They are a goo

Creating 100% secure software is not realistic. If you can't win, change the game. I'm not saying you should give up or that audits are a waste. They are a good thing, though you should also work on other approaches to the problem besides "work harder on security bugs".