My impression is that making everything formally verified is a lot of work and it would be very hard to make formally verified code as easy to write as non-verified code.