…because the overwhelming majority of memory safety bugs in js engines (v8, JSC, and spider monkey) are in operations that would be in unsafe blocks in rust as

…because the overwhelming majority of memory safety bugs in js engines (v8, JSC, and spider monkey) are in operations that would be in unsafe blocks in rust as well? In multiple decades I can think of a handful of engine bugs that would have been prevented by rust - and those were largely preventable (and now are) in c++ as well. It is possible for rust to be a safer language than c++ and to also not meaningfully change the security profile of the language. It’s not just the jit, the interpreter and GCs are also subject largely - necessarily - no more protected by rust than c++.