Except when all developers already know C, which is really what you want, seeing how no one ever rises above their level of C proficiency in any other imperative language.
Given the CVE database, all hope is lost if those programmers can never rise about their level of C profency.
Hmm? I'm not saying all C programmers are good, or even that people should prefer C for production code. I'm claiming that if you're bad at C programming, you're not going to be not-bad at programming some other "higher" imperative language.
No C programmer has ever been good. It demands an inhuman level of perfection, or formal methods that boil down to a theorem proving language with C window dressing (the mostly-proprietary stuff Rust competes with).