The problem is that C's case of "always trust the programmer" has proven over time not to be sufficient. This is particularly true for security bugs. The major

The problem is that C's case of "always trust the programmer" has proven over time not to be sufficient. This is particularly true for security bugs. The major driver behind Rust's design is memory safety - make it impossible (or very difficult) for certain classes of bugs to exist. You can write C software that is reliable without that safety, but it is very time consuming and never perfect. This is a similar situation - give the programmer tools to write "obviously" correct code.