Here's an idea: part of being safe is the discoverability of vulnerabilities

I that (infamous? infamously bad?) "Why I hate Rust" video and I noted the author complained of Rust's high number of CVEs despite the claim to safety, and it struck me that there's an important and oft-overlooked aspect of safety:

Rust makes it easier to discover vulnerabilities because the safe subset excludes an entire class of common problems (race conditions, memory violations) letting programmers focus on other things (logic correctness, unsafe code correctness, etc.)

To say that a lot of CVEs is a bad thing (provided they get addressed/responded to) is an example of survivorship bias. You only see the CVEs that get discovered.

And that's about the end of that thought.