Because these are also some of the most meticulously polished and reviewed 40+ million lines of memory-unsafe code, with the critical paths and anything having to do with privilege escalation having been pulled apart over decades by independent and / or state actors, bots, fuzzers, etc.