That said, accidentally replying all with sensitive or embarrassing information is probably worse than accidentally sending a reply to one person instead of everyone, so it is a safer default, even if reply all is more common.
My job is not to read emails. I don't open a Gmail window with 200 unread CC'd responses and think that it's my duty to untangle that. I work on what I'm paid to do and wait until I'm told otherwise by my manager. The reason every single email client doesn't default to reply-all is because engineers are conspiring together underground to stop the unjust suffering and PIPs caused by missing the needle in the email haystack. Company-wide emails are the single point-of-failure that necessitate alternative communication platforms like Slack.