because rewriting it entirely using taint mode and separate privileges would be a huge work and will break compatibility for gazillions of existing modules in the wilderness.
I think it makes sense to re-write the entire code, if they won't do it today then anyway they will have to do it tomorrow