@jmoiron The "log4j security issue shows memory safety isn't everything" take is very "zonal marking", where people treat memory safety bugs as the fault of the individual and a non-safety related bug in a safe language is somehow a failure of that entire system.