generally robustness trumps everything else

Theoretically

So it’s generally a very conservative software stack and process.

Yes, but that sort of process promotes non-adoption of techniques and processes that could increase robustness but are shunned due to pessimistic conservativeness