Security.

It needs to be built into every phase of computing, starting with the CPU micro-code, going through network protocols, up to the topmost JS framework layer.

Screw up one piece and you may end up with a major vulnerability.

Many software project owners avoid it due to complexity. To some extent, even academia sometimes eschews it.