With Rust I'd still be worried about compiler stability and destructor/allocation pauses. There's a reason that most avionics software written is on top of an R

With Rust I'd still be worried about compiler stability and destructor/allocation pauses. There's a reason that most avionics software written is on top of an RTOS & compiled with multiple different compiler vendor's software. Not saying it couldn't in the future, but it pays to look backwards for safety critical systems.