Still, it makes testing and finding bugs much easier, because you can relatively easily ensure correctness of the safe part of code, and unsafe parts get visibl

Still, it makes testing and finding bugs much easier, because you can relatively easily ensure correctness of the safe part of code, and unsafe parts get visible. It's not as potent as say Isabelle/HOL prover or top of SML or SPARK Ada, but much easier to write, and safer than Java at memory management in practice. (Where you get to write very thick foreign interfaces with no way to even try to make them safer, and cannot control memory allocation manually easily.) A decent balance.