The CVEs are due to the bug reporting, the bugs are not. The point is that memory safety bugs are the gift that keeps on giving. You can throw as much money i

The CVEs are due to the bug reporting, the bugs are not. The point is that memory safety bugs are the gift that keeps on giving. You can throw as much money into the problem as you want, and the inherent complexity of memory management means you are still gonna ship bugs of all severity.