On the Insecurity of Software Bloat