Security bugs are unavoidable, Rust/Java or not. This calls for architectural defense in depth. A lot of the exploits would be rendered harmless by employing w

Security bugs are unavoidable, Rust/Java or not. This calls for architectural defense in depth. A lot of the exploits would be rendered harmless by employing well established technique of splitting one huge monolithic app into processes with limited capabilities and communicating via simple and narrow channels. Qmail[1] is a good example of such architecture. The architectural support is already present in common OSes. -- https://en.wikipedia.org/wiki/Qmail https://en.wikipedia.org/wiki/Qmail