As I'm spending some time back in the land of low-level C, I'm trying to fully get my head around best-practices for header files and code organization, so I thought I'd toss out some questions.

Examples include not validating input from untrusted sources (the internet, a file not created by the current user, etc.); not patching systems because the security update might break something ...