On the eve of the company's developer conference, it cancels a new model over safety fears