@selea
I wouldn't dismiss this idea just because MS. They've made great progress in secure coding standards since 90's and Linux kernel on its own has quite a lot of legacy crap code that periodically resurfaces as CVEs.