Because it was spent on babysitting C pointers instead of actually writing secure software.