A large part of it is Google Chrome saying they had tried everything like static analysers and standards to secure their C++ yet they still get 70% of CVEs being memory safety related. I'm not sure if they've actually started using something like Rust or Ada though.
