C is easy to get right. Its also easy to get wrong. To be honest, most holes I've seen over the years are above the level of the language and are down to the i

C is easy to get right. Its also easy to get wrong. To be honest, most holes I've seen over the years are above the level of the language and are down to the implementation or design being flawed. For example SQL injection, silly business processes, elevation flaws, bad maths etc.