ArkyBeagle must have worked with some talented people. Most of the programmers, sloppy or rushed, made enough of specific errors they became the top 10. This included proprietary systems given Microsoft was in the lead on bug-count due to bugs in product and market share (i.e. targeting). Their choice was a combo of stronger review of unsafe code, introducing managed code to get rid of it everywhere possible, and huge investments in various, formal verifications. Their 0-day rate very low these days to point attackers hit 3rd party applications, usually also in C or C++. They said it cost many millions to do that bug-hunting, though.

Might be cheaper for next shop to just pick a language that's easier to do correctly. Someone giving that hard look as you stated saying, "Bro, have you even heard of Ada, Go, or Rust? And you still want to suffer through making a robust app in C? Why!?"