You don't seem to understand that those malicious programs have no way of running on someone's computer if they can't exploit some other program to get installe

You don't seem to understand that those malicious programs have no way of running on someone's computer if they can't exploit some other program to get installed on the machine in the first place. If the system software on the target machine is written in a better language and has no exploits, then it doesn't matter what language the attacker uses for their software.