&gt; the &quot;worse is better&quot; principle that correctness can be sacrified if it makes things too complicated<p>To be clear, in systems designed with the &quot;worse is better&quot; approach, responsibility for correctness can be pushed up the stack, from e.g. kernel programmers to user-space programmers, if doing the Right Thing lower in the stack is hard.  The example given in the paper is a syscall being interrupted -- in unix, it just fails with EINTR, and it&#x27;s the application author&#x27;s responsibility to retry.  (I agree that malloc returning null is similar.)<p>But worse is better isn&#x27;t saying that programs shouldn&#x27;t be correct if it&#x27;s complicated; it&#x27;s just a question of where the responsibility for correctly handling API edge cases should lie.<p>Moreover, if one reads the &quot;worse is better&quot; paper carefully, you&#x27;ll notice he doesn&#x27;t say that &quot;worse is better&quot; actually is better, overall.  The argument is only that it has better &quot;survival characteristics&quot;.  Meaning, as I read it, that they can gain and maintain momentum against competitors because they can move faster.<p>Which, tangentially, is all very interesting to me, because the three modern systems with the best survival characteristics are unix, C, and the web, the latter of which is definitely not worse is better.  (However bad you may think the web is as an API, &quot;worse is better&quot; is a design philosophy about giving users simple, low-level APIs, whereas the web is all about high-level APIs where the browser implements lots of logic to prevent you from shooting yourself in the foot.)  So maybe we need to reconsider the conclusions of the worse is better paper in light of the giant counterexample that is the web.