I’m probably the least technically competent person, but because there are political and cognitive issue at play, I feel like I can say something
The OpenBSD guys are right: the largest the codebase, the worse.
If open communities cannot be protected as argued here http://ftp.belnet.be/FOSDEM/2014/Janson/Sunday/NSA_operation_ORCHESTRA_Annual_Status_Report.webm
then you need tools that make things possible to isolated handcrafters.
Like LISP use to do.
A weakness of LISP was said to be that a lone hacker could do so much without having to coordinate with a community and get tangled in human issues.
And that was seen as a weakness of the language: many projects were left to rot once a single dude had achieved his personal goals.
But now if the issue is “how do I know you’re not from the NSA” to the point that OpenSSL is to be thrown away, than it’d be better to have more expressive languages and lighter tools
I’ve been told of an experiment by Alan Kay about a programming language with which a whole desktop enviroinment with web browsing has been implemented with 10.000 lines of code (or something)
That seems to me more relevant now.