Some of the criticism starts with "security was an after thought". I first heard that line of criticism in 1999 about completely unrelated code. Yet, in 2020, the wizards of the Kernel make the same "mistakes" I was making 20+ years ago? (IMO, no chance).

Engineers learn from mistakes...how is this industry not? Or, is "security after thought" just a lazy jab when any security issue is discovered? Or do we all still get so excited about the new-new that we keep skipping this part with the "it should be easy to fix later" BS we tell ourselves (about nearly everything)?