The Android study had a control: they compared to memory safety vulnerabilities in other greenfield projects written in modern C++. There was no significant im

The Android study had a control: they compared to memory safety vulnerabilities in other greenfield projects written in modern C++. There was no significant improvement for the greenfield projects, even though they also benefited from improvements to static analysis. The improvements were reserved for Android, which had a large share of its new sensitive code written in Rust.