>I think the effects of memory bugs on security are often overstated.

How often?