> But integer arithmetic is safe in terms of Rust. It's "defined safety": If a >= 0 and b >= 0 then a + b > = 0. True according to most schoolchildren but not

> But integer arithmetic is safe in terms of Rust. It's "defined safety": If a >= 0 and b >= 0 then a + b > = 0. True according to most schoolchildren but not true according to the Rust spec. It breaks the principle of least astonishment and has and will lead to security vulnerabilities.