The glibc maintainers think that the mandatory Annex K bounds-checking is rubbish compared to their optional __FORTIFY_SOURCE. Note that safeclib does the very

The glibc maintainers think that the mandatory Annex K bounds-checking is rubbish compared to their optional __FORTIFY_SOURCE. Note that safeclib does the very same optional compile-time checking, just again at run-time also. They also think that extensions by getenv() are more secure than extensions by callbacks. The real problem is that Annex K came from Microsoft, and people hated that.