This argument would be more convincing if, due to performance reasons, most Python code didn't use C extensions, where exploits are highly prevalent.