> But then there is a LOT more C/C++ software as well, so it makes sense that when you have a lot more code you'll also have a lot more bugs. 70% of C/C++ secu

> But then there is a LOT more C/C++ software as well, so it makes sense that when you have a lot more code you'll also have a lot more bugs. 70% of C/C++ security bugs are memory management bugs. Those don't (for the most part) exist in GC'd or other non-manually managed memory languages. > Why isn't that similarly well written software being used instead of the C/C++ software when the latter ends up with more bugs? Performance and low level control. Familiarity. etc.