An interesting thought. I keep finding it amusing how I learn a bit more about the buggy and vulnerable software, via a security announcements mailing list, whi

An interesting thought. I keep finding it amusing how I learn a bit more about the buggy and vulnerable software, via a security announcements mailing list, while not hearing unexpectedly about the software that is more secure. One of the comments to the linked article also mentions the principal-agent problem, though not by name; an interesting and tricky one, and likely indeed can happen in a software development setting.