Comment by mikewarot

Controversial opinion: It's an operating systems design issue, not a language issue. It's what you get for using OSs built on ambient authority, instead of default deny and capabilities, for 30 years past the point it was obvious they weren't fit for purpose in the internet era.