Avoiding complexity reduces bugs.
I call it my billion-dollar mistake. It was the invention of the null reference in 1965.
Certain teams are more careful in what they write. They generate less bugs. You can know that but it still doesn't mean there might be there might not be one bug that would be bad to ship the product with.
The real bug here is that the design of the system even permits this class of bug. It is unconscionable that someone designing a critical piece of security infrastructure would design the system in such a way that it does not fail safe.
If you want more effective programmers, you will discover that they should not waste their time debugging, they should not introduce the bugs to start with.
My bugs don't have bugs.
The middle age of buggers is not to be contemplated without horror.