Pretty much all recent bugs are logic errors which have nothing to do with the language. The actual bugs are often things like typos that use > instead of >=, lagging price oracles or using oracles that can be manipulated. You asserted that loops are 'insecure' but in reality dumb restrictions only force people to invent complex workarounds to obtain the same functionality, making everything less secure, not more. The absolute disaster of trying to make dexes work on Cardano is the best recent example. Their 'safe' utxo design is so limiting dexes like Sundae had to implement a trust-based sidechain just to be able to trade tokens, and it barely works.

After years of iteration, Solidity is now the safest smart contract language in existence. All common pitfalls are either well known or have been fixed. There are code analyzers. The problem with EVM isn't security, but the fact its word is 32 byte long which limits computational performance - but not that much really.