"Safe" programming languages and development approaches are not the most effective way for safe programs - removal of code == removal of attack surface is. Of course, companies/economy rewards for more code lines/gross domestic product, not with less. If you don't originally need the code, there is nothing to hack.
So much sadness created by low quality meaningless products, so much time wasted for continual updating, so much money wasted for poor resource allocation.