[deong]

I think with security-related software in particular, the proper answer there is "tough". If you can't figure out how to call a C function, you should probably just not write critical software.

[wildmusings]

One of the important lessons that the profession has yet to fully internalize is that there is very little software that is NOT security-related.

[Kalium]

It's very, very difficult to get product managers to internalize that there are real security restrictions on how they can enable users to make things pretty.

Almost everything is security-related. Almost nobody is willing to work with this.