Well it's dark humor and I can see how some are deeply offended. The post even says it's a slow growing treatable form, so personally I'll laugh at the joke. It's not like he's end stage untreatable form of cancer. Like you know arch linux running on WSL level cancer.
I mean you're not wrong but I'd argue you can get more interesting cve's using a higher more performant language such as c++. Where there are are ways to include CVE 's from C and introduce new ones to each level of your program using inheritance.