[jeffbee]

> Do you happen to have data on this?

Writing security-critical software entirely in C is prima facie evidence of a disqualifying lack of good taste.

[c_crank]

Most software that handles actual human lives on the line is not written in plain C. Writing 'security critical' software in C is a trade off - many people are willing to accept extra defects in return for the benefits of the C ABI and performance.