This CISA nonsense has to stop. Majority of runtimes of those safe languages are implemented in unsafe languages.
For example, it is a simple matter for a language to provide a list or array API that will perform bounds checking for indexed access. This simple measure would have prevented something like the HeartBleed security bug.