Sure, there’s tons on issues with legacy software like OpenSSL. But in almost all cases, the only way to deal with it is to slowly refactor and modernize it, not throw it away and start from scratch. Especially, if you have lots of things depending on it.
Many of our system are existentially flawed and can't be truly fixed.
Our current OSs for example, were designed in an era where security was no concern. Any app can do 'anything'.
If Linux, Mac and Windows were to have been designed from the start with good containerization, no direct memory pointers (unless special case), if we were using ATM-like networking with identity etc. ... the world would be an entirely different place.
It's obviously unlikely to happen, but if the powers that be actually wanted it to happen, it would.
I would hope that the US military/DARPA designs a system that is hardened in a way that could be made use of in the civilian sector as well. Though it's obviously very unlikely.
