You're arguing for a theoretical world, we're arguing from a practical one. I've spent enough time down in the trenches finding attacks in extremely well-reviewed code, that adding a massive new attack surface is not a thrilling proposition.
A defence is always only as strong as the weakest link, and an attacker usually has all the time in the world to find and exploit it.
Optimism has no place here.