You are missing one of the main points of the author.

It is possible, in theory, to write a secure C/C++ application, however it is not even possible in theory(!) to write a secure web application.