zlacker

Those projects are mostly research into how to make software and hardware less buggy; most of them are not themselves written with a threat model in mind.

>>kragen+(OP)
Exactly. Most could be, though, if people put forth the effort. So I keep mentioning such work.

Note: This comment is mainly for others reading along. Something I do on forums. I know you already understand this point.