that's what patches are for..

seriously though, for what it's worth, i'm a .NET web developer, and i've read plenty of MS dev articles. in their articles, they frequently call attention to best coding practices.. exception handling, security, the whole 9. the point being, it's easy to point fingers when you're not the one coding this stuff.

given the magnitude of these products, it's _easy_ to screw up. the point is how it's addressed when the problem is found. also, it comes down to the individual developer, and how much effort they want to put into their code on that particular day.