You are missing one of the main points of the author. It is possible, in theory, to write a secure C/C++ application, however it is not even possible in theory

You are missing one of the main points of the author. It is possible, in theory, to write a secure C/C++ application, however it is not even possible in theory(!) to write a secure web application.