> and leads to a security vulnerability I have trouble imagining how aborting leads to a security vulnerability? That's literally running no code, the opposite

> and leads to a security vulnerability I have trouble imagining how aborting leads to a security vulnerability? That's literally running no code, the opposite of running arbitrary code. Aborting is fine in any language. Criticisms of C here would come about because C doesn't abort when it should (null pointer deref, array out of bounds, etc), not the inverse.