> as the reader sticks to using proper format strings, he is good. Another important point to mention is that the format string itself should not be user coerc

> as the reader sticks to using proper format strings, he is good. Another important point to mention is that the format string itself should not be user coercible! XCode/LLVM/whatever Apple is using nowadays actually treats non-constant format strings as a compilation error, which is pretty cool.