Is C++ complex enough that it is difficult to model, and therefore hard to apply in formal methods?
Parts of the STL were formally verified. cprover (with satabs and cbmc) can handle C, C++ or Java. F' uses autogenerated classes, which helps a lot avoiding mistakes.