The devs really need to understand that in the niche that they're targeting, unless they can be absolutely sure that some default is safe, there should be no default. Most of these issues stem from this same fundamental problem - they pick some default, or some implicit behavior, ostensibly for convenience, but with unanticipated undesirable side effects.

I don't agree, you cannot expect to handle millions of dollars with those tools in the same way you don't write mission critical software in bash.