First: Valid point about the image size. A possible sign for bloat? Bloat is danger. Second: C, C++ or Rust are our tools. Everyone prefers another for techn

First: Valid point about the image size. A possible sign for bloat? Bloat is danger. Second: C, C++ or Rust are our tools. Everyone prefers another for technical and personal reasons. A religious believe in salvation by the next programming language is not helpful and causing harm. I hope sanitizers for C/C++ improve further - which improved safety a lot. For C++28 or C++3x we can hope for further safety improvements. Which we need. Most bugs are logic errors. SharePoint is - according to my knowledge - implemented in C#. The CVEs mention deserialization of untrusted data, improper limitation of a pathname to a restricted directory ('path traversal'), improper control of generation of code ('code injection') and so on. I'm rather careful about people requiring another language and claiming it will fix everything. Reliability needs hard work (design, code, review, testing...more review) even with well selected tools. I guess Microsoft does that. And I guess Microsoft works like the rest of the industry, focus on time-to-market and building a monopoly in every area. That's why we see rapid updates in a lot areas and - worse - enforced updates. And why software is known for it's low quality in comparsion to other industries? Examples: GNOME opted to use JavaScript in the hype back in 2010: * JavaScript reduced compatibility compared to C/C++. * They suffered a lot from memory-leaks. Due to JavaScript. * The run-time modification seems not to be a big benefit. * Extra dependencies for JavaScript. More memory usage. The code matured and it works now rather well. I didn't liked the decision back then. I don't like it now. But I also don't request a rewrite in C, C++, Rust or Python. Without good reasons (plural) it doesn't benefit the project. Java also suffered. This rewrite of C++ to Java with JRE is a example, why rewrites for the sake of rewrites aren't a solution: https://neilmadden.blog/2022/04/19/psychic-signatures-in-java/ https://neilmadden.blog/2022/04/19/psychic-signatures-in-jav... There is no magic. Only thorough work. We will always suffer from security issues and we shall be always careful.