Today's software requires constant patches to "stay" secure. If you stop patching your OpenSSL or your Windows XP, its security will degrade -- but the softwar

Today's software requires constant patches to "stay" secure. If you stop patching your OpenSSL or your Windows XP, its security will degrade -- but the software is the same; all that's changed is some hacker was able to construct an MS Paint file that executes arbitrary code, or some other ridiculous nonsense. Large software systems will always have bugs and be difficult to understand in their entirety, but they could be made orders of magnitude easier to secure by not giving every line of code the potential to compromise the system.