Programming is hard because thinking is hard. I think it's entirely reasonable to write security-focused software in a highly restricted language with concrete

Programming is hard because thinking is hard. I think it's entirely reasonable to write security-focused software in a highly restricted language with concrete formal semantics. The problem with trivial examples is that they're often constructed to prove a point and don't represent what a real developer would write if they were to seriously consider the problem in C.