There is a fundamental conflict of interest between security people and developers&#x2F;owners&#x2F;the general public. Infosec isn&#x27;t interested in curing fundamental IT insecurity by, say, using safe languages (like Rust or something JVM-based or maybe JavaScript which is also a safe GCed language) for application development and using safe OSes that aren&#x27;t built around 70s state-of-art (ugh.. really no production ready examples here).
Instead infosec community - both &quot;blackhat&quot; attackers and &quot;whitehat&quot; protectors - profits from business as usual: a never-ending stream of zero days, CVEs, buffer overflows, side-channel attacks. It&#x27;s not in their true interest to kill their cash cow.<p>Remember: If we, developers, used modern safe programming technologies, such as safe languages and OSes built around capability-based security, 99% of security exploits wouldn&#x27;t even exist.