Sure you can, make liability a thing like in other industries, and make introducing development practices that make RCE avoidable a legal requirement.

Most RCE come to to happen, because the industry largely considers security best practices an afterthought and keeps pushing for the use of unsafe languages.

Don't complain about death tools, when people keep driving without helmets and seat belts.