Abstraction. I can tell you with 100% confidence that any of these logic bugs are created by unecessary abstraction. Anybody working in security will tell you

Abstraction. I can tell you with 100% confidence that any of these logic bugs are created by unecessary abstraction. Anybody working in security will tell you the same. Piles of abstractions make it impossible to find out these bugs. You need a month of work to understand these codebases, often only the main developer has the architecture in its head.