Indeed, security never comes for free, but costs can vary tremendously.<p>In case of C, there are layers of additional rulesets (not enforced by compiler), scrutiny and coding standards even for basic things.<p>I do not subscribe to formal verification crowd claims, but some basic things can make great improvements. E.g. immutability by default.