There's a practical difference in how much of the program is high risk. If all of the risk is concentrated in a few functions, it's easier to focus on reviewing

There's a practical difference in how much of the program is high risk. If all of the risk is concentrated in a few functions, it's easier to focus on reviewing/testing/fuzzing these bits. Rust changes the bug-spotting game from "Where's Waldo?" to "Is this a Waldo?"