That's true, but it misses the point that scripting adds orders of magnitude greater complexity to the attack surface. Fixing other kinds of bugs is fairly str

That's true, but it misses the point that scripting adds orders of magnitude greater complexity to the attack surface. Fixing other kinds of bugs is fairly straightforward. Update your toolchain, update your dependencies, use the right dependencies, avoid undefined behavior, etc. Fixing scripting issues means participating in an active arms race.