> embedded Rust (lots of FFI & unsafe) How much? And did the parts in safe Rust make up/protect the unsafe parts? I’d be concerned that the reason there are f

> embedded Rust (lots of FFI & unsafe) How much? And did the parts in safe Rust make up/protect the unsafe parts? I’d be concerned that the reason there are fewer errors is because of the experience the team already had with the existing system. Porting or rewriting it would allow them to avoid many of the errors that were already fixed in the C implementation and errors they knew about ahead of time… assuming there’s more unsafe/FFI than safe.