You misconstrued my argument. I'm not advocating for "fixing all the bugs". On the contrary. I argue that retrofitting security does not work. I argued that w

You misconstrued my argument. I'm not advocating for "fixing all the bugs". On the contrary. I argue that retrofitting security does not work. I argued that we need to find a way to construct secure software, not to make existing insecure software more secure retroactively. We have tried writing shitty software first and then try to make it more secure for decades now. The track record is not good. We should try something else. Like constructing secure software from the start.