You're saying exactly the same thing. "This environment can shoot me in the foot, but not if I do it right." MISRA C with copious static analysis and a talent

You're saying exactly the same thing. "This environment can shoot me in the foot, but not if I do it right." MISRA C with copious static analysis and a talented QA team is safe, too!