As someone who doesn’t program in C or C++ regularly, aren’t bugs from format strings caused by passing the user string as the “format string”? For example,<p><pre><code> printf(userInput) // WRONG
printf("%s", userInput) // OK
</code></pre>
Don’t compilers warn about these potential bugs?