Believing that all software security problems would be solved if we got rid of C is a bigger disease than C itself. I work in a fairly large (for my country) financial institution and the problems we deal with on a day to day basis are so far removed from buffer overflows that it's not even funny.
We still have software running in excel macros that control web browsers via COM. C is nothing compared to the attack surface of that.
We still have software running in excel macros that control web browsers via COM. C is nothing compared to the attack surface of that.