This is what I mean with knowing what risks your application / framework / language will bring and mitigating them accordingly.

(edited for clarity)