How can C Programs be so Reliable?