Analysis of security of arbitrary programs is in its infancy, we can't quantify anything yet. I think the best we have is halvarflake's provable unexploitabilit

Analysis of security of arbitrary programs is in its infancy, we can't quantify anything yet. I think the best we have is halvarflake's provable unexploitability [1] and that is very weak. 1 - https://ieeexplore.ieee.org/document/8226852 https://ieeexplore.ieee.org/document/8226852