(Sigh)

A typical webapp with 31 typical frameworks has an attack surface the size of the US electrical grid, and is about as well secured.