20+ year programmers are such a tiny tiny cohort compared to recent ones, I think you underestimate this effect.

(Not that 20 years of experience makes you a decent secure C programmer, but that's a different argument)