If you have to think about safety then the technology is unsafe by default, ergo not suitable for security and reliability critical systems. No amount of thinking is going to fix that.

I haven't built anything out of choice in a C derivative since the late 1980s, unless I explicitly wanted to break something or do something naughty or talk to hardware directly.