"out of C into a language with no buffer overruns, and in general much stronger security and correctness guarantees."
Doesn't sound like C++.
Doesn't sound like C++.
Rust and Go, in various different ways (and to various degrees), make it actually safe.