If $typical_software_stacks have had enough "company ending" security issues ... maybe the whole industry have been seriously misguided for decades? Clearly they cannot have taken security serious in any way shape or form.