I don't see any incentive to move away from C. I was discouraged to use C++ even. The amount of extra work is huge.

I don't know a lot about Rust myself, but the impression I get is that it is a bit less obviously deterministic than C.

Things boil down to (IMHO): - every requirement must be traceable to code - every line of code must fulfill a requirement - any dynamic behavior (for example heap allocation) must be proven to work under all circumstances