I guess if we add all the problems in IT that were caused by bugs and poor designs of parsers/serializations, e.g. SQL injections, XSS, null byte vulns etc., we

I guess if we add all the problems in IT that were caused by bugs and poor designs of parsers/serializations, e.g. SQL injections, XSS, null byte vulns etc., we get billions of human hours in damages. What should be instead is an absolutely clear serialization format into a byte string of ANY data structure that must processed by two different programs. Parsers are programs, they should "parse" bytes, not strings, like we humans do.