Security matters. Any discussion about security is good, even if in the worst case the speaker is a $myLanguage bigot. Because we have learned once again with l

Security matters. Any discussion about security is good, even if in the worst case the speaker is a $myLanguage bigot. Because we have learned once again with log4shell that... security matters. The OP writes, "Software Security has no universal theory on which to rely. Security is most often taught by enumerating different security issues, mitigations and security models and hoping that students can build from them to gain general understanding. Even of those theoretical works that exist, relatively few of try to build a link between programming language and security aspects." Compilers and IDEs can improve. Where all the security effort clearly wanes is at the right of the OP's "technical --> tooling --> thinking" spectrum. A modern language should be memory safe... But general language safety must extend to dependency management and package repositories. Without competent dependency management and fully-secured repositories of vetted code, we still have a professional community of very proud dumpster fires.