I agree with almost all of your analysis. One has to be an excellent programmer to write secure code, doubly so in C. I disagree with your conclusion, though.

I agree with almost all of your analysis. One has to be an excellent programmer to write secure code, doubly so in C. I disagree with your conclusion, though. To me, the above means that C FAILS to meet the goal of enabling secure programming. An analogy might be car safety. Yes, if we had perfect drivers we would not even need seatbelts, let alone airbags. But, I would definitely say that a car without these does not meet the goal of "enabling" safe driving merely because it is theoretically possible. https://crashstats.nhtsa.dot.gov/Api/Public/ViewPublication/812069.pdf https://crashstats.nhtsa.dot.gov/Api/Public/ViewPublication/...