> Mitigation: Use battle-tested STAS implementations, formal verification where possible