Security
Minimized the number of places where externally derived data is accepted.
One place where records are converted from wire format to internal format (BIND 8 had around 6 places where this could occur).
All answers are synthesized, data is not passed through
Program by Contract whereby routines verify their inputs before using them.