Every C program of meaningful complexity that operates on user data is riddled with bugs.

Go look at the linux kernel. Arguably the most important C program on the planet. Absolutely enormous incentive to get it correct. It is... full of bugs. Including a large number of memory safety bugs.