Also, I think I read that part of the security guarantees in OpenSSH come from its actual software design, as in (but not limited to?) multiprocess design, redu

Also, I think I read that part of the security guarantees in OpenSSH come from its actual software design, as in (but not limited to?) multiprocess design, reducing the blast radius of eventual parsing or logic bugs. I can't locate a good read on what they do right and how they've progressed since the original design (and maybe 'where' formal proof or memory safety - be it RIIR or good old Frama-C - might be the most impactful). But my googlefu is subpar these days...