Because people weren't building/using the tools that prevent those vulnerabilities in the first place. See that link for previous discussion.