It's not just "C++ bad". It's "we don't want to deal with memory errors in directly user facing code that parses untrusted contents". That's a perfectly reason

It's not just "C++ bad". It's "we don't want to deal with memory errors in directly user facing code that parses untrusted contents". That's a perfectly reasonable stance.