I 100% agree with this. I don't believe that a single human on the planet can write a nontrivial C program that processes untrusted input and contains no security vulnerabilities on their first attempt.

And this is a much much much easier task than having a team develop and maintain such a system over time.