It would be my suspicion that warning versions of strcat et al would generate
much more noise than signal, even worse than gets(), and blindly replacing
them with counted versions is probably more troublesome, since many programs
(for better or worse) embed strcat or strcpy in time-critical loops; many
such programs have also taken the time to ensure that overflow situations
will not happen.  (Of course, many have not, which is the problem.)