[lmm]

People have been trying this for decades. It's always failed. You can't retrofit safety onto C without breaking compatibility, and if someone is willing to break compatibility they've already switched to Rust.