While I agree with your point, there is at least something to be said for blue sky codebases being able to use more secure languages/platforms and secure coding

While I agree with your point, there is at least something to be said for blue sky codebases being able to use more secure languages/platforms and secure coding practices from the get-go, versus legacy codebases. Prevention of overflow and UAF vulns come to mind as an immediate win.