Agreed, I keep reaching for C++, because of the dependency many ecosystems have.

Chromium is a good example actually, I bet they would rather follow the "Custom C++ libraries" and "Hardware mitigations" than the Firefox approach.

https://www.chromium.org/Home/chromium-security/memory-safet...

Apple did something similar recently, their iBoot firmware uses a custom safe C dialect.