[mrkeen]

You can't have vulnerabilities in code which isn't there.

Compared to what I could be using, my ideal stack does not have: class loaders, virtual machines, dependency injection containers, web application servers, Log4J, etc.