> There are certainly tools to detect any known CVEs, and tools to help you audit the unsafe code that you are using. so they don't automatically prevent the c

> There are certainly tools to detect any known CVEs, and tools to help you audit the unsafe code that you are using. so they don't automatically prevent the code from containing new CVEs. > That's a tool not a problem - you have yet to provide an argument that they are necessary and real world experience says that Rust achieves a meaningful amount of safety and convenience without them. I can argue along the same line that Rust is a tool not a problem, and that you need to prove that Rust has a "meaningful" amount of safety. When you say that something has "meaningful amount of sth" you should add to whom it is meaningful and based on what criteria. Or, alternatively, you can stay on a pure technical aspect of the matter and conclude that the safety part of the language is not complete. > That's also a tool not a problem, and you could argue that rust's ADTs (enums) give you a weak version of it. totality checking is not exhaustiveness checking, there are two more properties that enums are unable to express in any "weak" form - termination and productiveness.