At the risk of an analogy, this is like finding that the Linux kernel provides no guarantee that a process won’t contain buffer overflow vulnerabilities. While buffer overflows are bad, and it would be a good idea to try to prevent them, enforcing against them at the kernel level would be a far-reaching prospect with many consequences, intended and unintended.

The judge is opining that other layers of protection are available.