Don't think anybody cares enough to go through so much change to deal with vulnerabilities. I think nowadays people treat buffer overruns the same way they treat bus delays: it's a fact of life, just live with it. Not saying that's right, but turning that ship around is no easy feat.