I think you're overestimating your ability to note a small security bug in a diff. If it was as easy as you seem to think, we probably wouldn't introduce such

I think you're overestimating your ability to note a small security bug in a diff. If it was as easy as you seem to think, we probably wouldn't introduce such bugs by accident in the first place. It can be as innocuous looking as using strncpy instead of strlcpy.