Comment by mhh__

Keep in mind that for this kind of project you want static analysis and formal verification (model checking for example) rather than just day-to-day safety features.

I.e. the Rust this, Rust that spam is a little naive to the task at hand, even though it would be a step up from C