A well installed microcode bug will be almost impossible to detect.
I am a very bottom-up thinker.
We have persistent objects, they're called files.
In college, before video games, we would amuse ourselves by posing programming exercises.
No amount of source-level verification or scrutiny will protect you from using untrusted code.
In fact, we started off with two or three different shells and the shell had life of its own.