And, if you really want to restrict to your goalpost moving subset, then go ahead and demonstrate that the above general trends are not trends in your subset. Because the literature on it disagrees with you.
So, to defend your claim "The mistake is thinking everybody else is in it too", care to show where "everybody else" is free from these bugs?
https://scholar.google.com/scholar?hl=en&as_sdt=0%2C15&q=use...
https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=use+after+f...