“but the available evidence suggests that writing secure C is not a thing that mortals are good at”