Not the best possible analogy but I get your point. The problem with OpenSSL and Heartbleed was there weren't even procedures in case of sh_t hitting the fan, w

Not the best possible analogy but I get your point. The problem with OpenSSL and Heartbleed was there weren't even procedures in case of sh_t hitting the fan, whereas with nuclear reactors that's often the case. In programming, and especially systems programming, people love to pretend they are infallible, to the detriment of everyone suffering from permanent firmware bugs and critical security infrastructure leaking their secrets.