This really isn't true in any common cases. For instance web frameworks are making SQLi and CSRF, and to a lesser extent XSS, less common. When everyone was rew

This really isn't true in any common cases. For instance web frameworks are making SQLi and CSRF, and to a lesser extent XSS, less common. When everyone was rewriting the same code in their CGIs over and over again, many of them got it wrong and opened themselves up to these attacks. While it is true that standardizing on a small number of stacks can increase the effectiveness of 0day exploits, they are not responsible for the majority of break-ins.