> Anything that combines those three capabilities will leave you open to attacks, and the attacks don't even need to be particularly sophisticated to get through.

"...don't even need to be particularly sophisticated..."

This stuff just drives me insane. How many decades will it take to mostly mitigate the "sophisticated" attacks? Having three different ways to end lines ("\n", "\r\n", and "\r") caused years of subtle bugs, and buffer overflows are still causing them, yet we're thinking about using this thing to write code? It's all so stupid and predictable...