I really enjoy reading these war stories, even though this sounds like a super difficult time for the author. On a technical note though, aren't these kinds of breaches a powerful reason to use memory safe languages? I know performance used to be a major driving factor, but I doubt that's the case anymore. Even then, does it seem reasonable to say "I'm risking it all for a 20% performance gain"?
Admittedly, this isn't the kind of stuff I normally write, so I might be missing something. But since the ramifications of these memory leaks are so severe, I would think the industry would be adapting.