My thinking is this: 1. Exploitation inherently relies on malicious input data. 2. In computer systems, any input data (especially in human-facing systems) is

My thinking is this: 1. Exploitation inherently relies on malicious input data. 2. In computer systems, any input data (especially in human-facing systems) is not logically useful to the software until parsed. 3. Thus, a parser is the first software element which systematically interacts with the input data. It is the prime exploitation target. That, + parsing complex data is just kind of hard to get right. If iMessage was UTF-8 only, this would not be an issue I'm sure.