I agree, if people just had refrained from building things in c/c++ that operated on data from across a security boundary we wouldn't be in this mess.