> Lack of bounds checking, not pointer arithmetic or allocation lifecycle, is the major source of security issues with existing software. No, this is not true.

> Lack of bounds checking, not pointer arithmetic or allocation lifecycle, is the major source of security issues with existing software. No, this is not true. Use after free is more pernicious nowadays.