I don't assume that applications are inherently hostile, but I do not trust that the developer of every application I use to open untrusted input is sufficientl

I don't assume that applications are inherently hostile, but I do not trust that the developer of every application I use to open untrusted input is sufficiently security conscious to prevent those applications from being subverted.