About four years ago, Microsoft decided to do something about its part of the problem, and added “secure” string handling functions to the C runtime library.