Comment by akerl_

> Those problems are endemic to all web apps.

No, they’re not.

They’re design choices where the default that has been chosen is dangerous for somebody deploying the software. Plenty of web apps do not have those pitfalls.