That explains a lot! Never worked with certified code, but I see how it makes sense.

Do the vendor compilers have a very focused feature set as a result? To reduce both test surface area and chance of expensive mistakes?