Yes, it's got a history. We know the history well. We know the painful ways of old. Yes, there is unpatched and otherwise insecure legacy code out there in the wild. Yes you can find examples of terrible code in old blog posts. But if you haven't updated your opinion since that time, you are running on outdated intel.
We learned the hard way. We hardened our language, our knowledge and our practices as a community over decades of experience making popular and profitable web applications.