Pragmatic thought: service providers like this should disclose their languages and practices for every part of their infrastructure. If one says they write in-house code that handles sensitive customer data in unsafe languages (instead of, say, a managed language or even formally verified code) then we have something to help decide which provider to use.<p>Yes software is hard, but that means we should use the best tools and focus the effort on the problems that <i>aren't</i> trivially avoidable.
To help with this, I made <a href="https://bleed.cloud/index.html" rel="nofollow">https://bleed.cloud/index.html</a><p>It lets you run domains quickly without downloading and grepping.