Wait until you hear that banks use Perl.
Do you remember the last time Perl had a flaw like this that took every bank down? I don't.
bugzilla still relies on perl's non-existing tainting of hash keys. I fixed that about 10 years ago, but perl5 never did.