> that from 2005-2015, Java and C# applications were literally the bread and butter of every application security sho

That is because that is what enterprise uses, I don't think it would have changed a lot now.