C's simplicity is oversold, when taking into account that in practice it isn't the second edition of the K&R C book, adapted for ISO, rather a plethora of extensions, several standard revisions since 1989, zero care for security.
Dealing with security issues is one of my occupations, when having a DevOps role in project delivery, and I rather use that time elsewhere.