By scalability, I meant more along the lines of, "Is it possible/efficient/reasonable to write large, secure codebases in language X using process Y?" Answer A

By scalability, I meant more along the lines of, "Is it possible/efficient/reasonable to write large, secure codebases in language X using process Y?" Answer A is "Yes, bugs come from bad development practices or unskilled programmers." Answer B is "No, there are fundamental issues with the language that make it unreasonable to expect a secure product." In other words, are the primary sources of bugs programmers or the ways the language forces them to interface with it?