It's my strong opinion that the problem isn't a language or application problem, but rather an OS design flaw. Relying on ambient authority was fine back in the days of stand alone systems with a few users and no networks.

It's insane that we haven't yet migrated to capabilities based Operating Systems with default deny instead of default permit.

Maybe this will be the push to get us over the hump?