What stops you from writing an API on top of the system malloc that has two malloc functions like I described above, with return types that have unambiguous nul

What stops you from writing an API on top of the system malloc that has two malloc functions like I described above, with return types that have unambiguous nullity? Then your religious NULL checks won't be duplicated (and you won't be able to stray from the righteous path and forget any).