&gt; For an example of the latter case, take the Java &quot;privilege&quot; system. SEI CERT dings Java because operating the Java privilege system is fiddly, and if you do it wrong you&#x27;re exposed to privilege escalation. You&#x27;re not exposed to privilege escalation in C --- because all C code is privileged!<p>On the other hand, I&#x27;ve heard a nonzero amount of people say it&#x27;s cool to load untrusted code into your JVM or CLR because high level languages are magic pixie dust.  So maybe it does need saying for somebody.