> T, T&, T*, std::optional, std::unique_ptr to describe similar things, each broken in its own way

How is `T` broken? How are the other things broken?

No matter what language you use, most of the code running between what you wrote and the hardware will be written in C. Your choice for the 1% on top is not very consequential. There is still a huge attack surface area no matter what.