I've been 'around' static analysis a decent amount in the past 10 months or so, and my conclusion is that the deep solution is ML/Haskell/etc, not static analysis.

Writing in C/C++ is like asking to be shot in your foot. So you get static analysis, which gives you a modicum of help.