An unfortunate state of the industry we are in is a result of years of technological evolution during which security and reliability were either ignored or pres

An unfortunate state of the industry we are in is a result of years of technological evolution during which security and reliability were either ignored or present only in marketing materials and not in the result. Attempts to add security on top of this insecure mess sometimes make situation even worse (e. g. many anti-virus products were vulnerable to RCE at some points). Customers are complicit in this process too, especially if ware are talking about enterprise software. And simplicity which affects both security and reliability appreciated only by a minority of developers. It is unfair to hold an app developer liable, when there is no practical way to create even a small CRUD application which doesn't have many million lines of code written by thousands of developers as dependencies (counting an OS as a dependency). And this becomes worse every year. IMHO the only good way to create secure system is start from keeping the system simple and easy to audit. To keep it this way one would have not only invest a lot of time, but also to sacrifice non-essential features (something customers/users not used to do and will have a hard time accepting).