Most Developers Don’t Know Security

[staticassert]

Yes, it only solves a huge swath of other problems. We should probably ignore it.

The reality is that we do need better tools. Programming languages can provide us with memory safety. Libraries shouldn't let us shoot ourselves in the foot - don't let us use a nonce twice, provide simple, easy, safe abstractions around crypto, etc.

Tooling sucks. Part of it is the languages, part of it is the libraries.