I'd say quite a few (most?) of us do have an interest in the most secure form of coding there is: write as little of it as possible, and work with as little dat

I'd say quite a few (most?) of us do have an interest in the most secure form of coding there is: write as little of it as possible, and work with as little data as possible. Unfortunately, we live in a real world with endless corner cases, so real-world software ends up having to address those corner cases - meaning more code, and more data to work with. Such software is also rarely unburdened by deadlines and prioritizations from management - meaning that as much as programmers would like to pursue security hardening, there's rarely time to do so. In other words: you're barking up the wrong tree. Take it up with my manager/customer/etc. demanding I devote my time to new features instead of even so much as tech debt reduction (let alone actual security hardening).