Is it so easy to find vulnerabilities?

Large software programs, such as browsers, kernels, and blockchains, are composed of millions of lines of code that have been written by human beings. This presents a significant challenge for modern software development, as it is difficult for any individual to read through such vast amounts of code. For example, it would take an estimated half a million pages, in A4 size with a font of 10pt, to read through the code of Chromium (which is estimated to be around 35 million lines of code). Even someone who reads two books per year would only be able to read around 15,000 pages of A4 in their entire life, assuming they read for 50 years.

Thousands of engineers have contributed to these projects over the years, and many changes have been made to improve security, reliability, and performance. However, these three components often compete with each other, and finding optimal trade-offs is particularly complex. The challenge for a principal engineer...