The number of critical CVEs every year related to memory safety seems to point to the contrary. The amount of "just one more static analysizer and we'll never have any bugs!" in the C++ community is honestly disturbing, alongside the obvious elitism and absurdity of statements like 20 years of knowledge == no bugs ever.