> It's fine to say "let's clear this question up" and proceed to clear it up. I think the issue is that no one had the expertise to clear it up. So how do you

> It's fine to say "let's clear this question up" and proceed to clear it up. I think the issue is that no one had the expertise to clear it up. So how do you move forward? Someone has to get called in and there's no process for that. Or the person pushing the feature needs to explain the security implications of the feature. Maybe some sort of 'requires security triage' tag could get applied to issues like this, and the rust security wg or whoever is qualified ot make these calls could review. Ultimately, my opinion is that if you're making a PR with security implications, and there are people saying "I'm uncomfortable and don't understand the security implications", it's on you to explain them. Otherwise progress should not continue.