“Merely keeping up with the stream of issues found by fuzzing costs Google at least 0.25 full time software engineers. Worse, we observably don’t find everything or find things only after the code has shipped to users.”
Fuzzing FreeType costs Google at least a quarter of an engineer just to keep up, and bugs still ship. Chrome now parses web fonts with a Rust library instead. Any web page can send a font, so every malformed font used to reach C code. That door is closing.