Level of the language has little to do with the complexity of code. - a modern OS has anywhere upwards of 50 million lines of code (Linux kernel alone is ~30 m

Level of the language has little to do with the complexity of code. - a modern OS has anywhere upwards of 50 million lines of code (Linux kernel alone is ~30 million lines of code) [1] - a modern browser is anywhere upwards of 30 million lines of code [2] - there are over 3.5 million individual packages available for the various Linuxes [3] And so on. The pretence that there are people and resources readily available to analyse those sources, and understand them well enough to uncover complex vulnerabilities is just that: a pretence, a myth. As evidenced by high-profile bugs that existed in popular codebases for years. Does the availability of source code make analysis somewhat easier? Yes. There's a difference though between reviewing left-pad on GitHub and auditing OpenSSL, for example. There are thousands of people who can do the former, and perhaps 5 who can do the latter. That is why "the number of people who can properly analyse complex software to uncover what it actually does is a line asymptotically approaching zero". [1] https://www.linux.com/news/linux-in-2020-27-8-million-lines-of-code-in-the-kernel-1-3-million-in-systemd/ https://www.linux.com/news/linux-in-2020-27-8-million-lines-... [2] https://www.openhub.net/p/chrome/analyses/latest/languages_summary https://www.openhub.net/p/chrome/analyses/latest/languages_s... [3] https://repology.org/repositories/packages https://repology.org/repositories/packages