https://www.svt.se/nyheter/inrikes/integritetsmyndigheten-in...

Doesn't matter what language you use if you don't actually maintain the software.

Get into everything, break every security control in Europe, be a pain. As long as function is not impacted, and security problems are reported responsibly. Don't DoS a power plant because you think you can, and face a judge if you do.

That's what foreign powers are doing and slowly collecting as preparation for the future, and that's the only real way to increase cyber security across the board.