Cost and risk management. These systems undergo rigorous safety evaluation, auditing, and testing. This is a manageable risk (very low) given the business requirements and the threat model.