How is there an argument that it would take too much code? He gives the example of how inserting an off-by-one error can lead to complete compromise of your mac

How is there an argument that it would take too much code? He gives the example of how inserting an off-by-one error can lead to complete compromise of your machine. Inserting an off-by-one error shouldn't be too much code.