Google also makes claims[1] corroborating this ratio in their own work. It's an endless ammo supply for the memory safety argument. (The linked story doesn't argue otherwise, despite the headline.)

[1] https://www.chromium.org/Home/chromium-security/memory-safet...