While I totally agree that memory management is a huge source of problems (learn Rust is next on my project queue), I suspect that the problem of "writing secur

While I totally agree that memory management is a huge source of problems (learn Rust is next on my project queue), I suspect that the problem of "writing secure software" is not actually technical in nature. The best tools and methods in the world are only useful if they are actually used in practice. A better question is why people accept insecure software and then let the software industry blame the victims (like calling them "hopeless idiots"), when it was - as you say - the insecure software that was the actual problem. Dan Geer was right - you fix this with product liability. The tools (such as new languages like rust, etc) will happen automatically if you make the person who sold you software liable for the damage it causes. (standard "when used normally" restrictions apply, of course).