If you use the right tools (static analysis and sanitizers and fuzzers) your own code (and any code you rely on which you have the source for) will be handled.

If you use the right tools (static analysis and sanitizers and fuzzers) your own code (and any code you rely on which you have the source for) will be handled. If you rely on binary dependencies which have quality problems, then u can't help you there. But that could be an attack vector in any language. And if you are worried about the operating system itself, then there really is no easy way around it unless you want to run a unikernel for everything. And even then you may hit a CPU microcode bug it hardware bug...