I don’t think the federal government should step in and regulate it, but why not some kind of professional or trade organization, like UL?

And really, I think your argument bolsters my case. Federal and state governments are freaking out about cybersecurity and protecting infrastructure and voting systems, so why shouldn’t they ban the use of software written in C in their acquisition process?