@lettosprey@tech.lgbt@timbray "attackers can force the stack to overflow into the heap"
No, this does not sound like a "recursion is often bad" issue. When the language is so unsafe that writing recursive calls can open up for attacks, then I think it is time to dump the language rather than forcing developers to traverse graphs without recursion.
Avoiding regular iteration loops makes software more maintainable and less error prone, and therefor safer. Use a language that can do this risk free instead of discouraging it...