Not everyone's "personal software" runs on a publicly accessible host on the internet.
I trust my Browser, OS and file system too.
But I'm also pretty sure none of the bespoke software I have will get any kind of security implications. The chance of my own file manager having a buffer overflow RCE triggered by a random file is practically zero.