This is an interesting project for defining what "safe" means. When you have access to read/write arbitrary memory through these side-channels, all the bets ar

This is an interesting project for defining what "safe" means. When you have access to read/write arbitrary memory through these side-channels, all the bets are off in Rust land. Process execution is another hole - you could spawn GDB, debug yourself, and then just poke bytes in as needed. Or just embed a binary that can ptrace yourself and execute it. Rust can't protect you from side-channels (nor can languages like Java!) - if you need that you can compile to wasm and sandbox the file system.