Answer A is "Yes, bugs come from bad development practices or unskilled programmers."
Answer B is "No, there are fundamental issues with the language that make it unreasonable to expect a secure product."
In other words, are the primary sources of bugs programmers or the ways the language forces them to interface with it?