The biggest theme on Linux Security Summit 2018 was taming security exploits on Linux kernel due to C's lack of security.
I count at least 10 talks about this subject.
https://www.youtube.com/user/TheLinuxFoundation/videos
So apparently the review process, approvals and current static validation is still not enough.