[Sohcahtoa82]

> (with gaping security holes / processes)

The problem is that you're assuming you can prove a program doesn't having security holes and bad processes.

[hpen]

You're moving the goal post waaaay far down. How about just following best practices? How about not allowing runtime code injection? Turns out security holes often have much in common, and with ways to mitigate them. Stop 100% of security holes? nah. Stop 99.9% of security holes? Yes and what an improvement.