They supposedly did, that is why most stuff on Azure is now a mix of Java, C#, Go and Rust with very little C and C++.

And there is the SFI program.

However this is a Windows application, and in spite some Rust advances in WinDev, it is pretty much C and C++ turf, with Rust getting the same warm reception as .NET used to enjoy.

Guess which language is Paint written on?

Nonetheless, they are doubling down on sandboxing Windows, macOS, iOS and Android style, for quite some time, exactly to become security first as you are asking for.