We use ada for older projects, I think the move to C was precipitated by the fact that it's hard to hire for ADA and there is not that much external support.

C + MISRA + extensive testing plugs the gaps.