Would the recent Spectre vulnerability be an acceptable example for you? There are a gazillion others, but this one is nice and sweet and exposes the whole web

Would the recent Spectre vulnerability be an acceptable example for you? There are a gazillion others, but this one is nice and sweet and exposes the whole web app strategy as completely bankrupt from a security perspective.