If it were easy to avoid "the bad parts" of C, there would be a lot fewer exploits based on memory corruption. Many of the bad parts are unfortunately integral

If it were easy to avoid "the bad parts" of C, there would be a lot fewer exploits based on memory corruption. Many of the bad parts are unfortunately integral to the language. Only the strictest coding standards have a chance to avoid all the bad parts, but it's not generally possible to automatically check for compliance with all rules of, e.g. MISRA, so you still have fallible humans in the loop.