> and rustc could include malicious code that isn’t obvious to an outside auditor. I believe mrustc [0] is generally considered the current defense against a t

> and rustc could include malicious code that isn’t obvious to an outside auditor. I believe mrustc [0] is generally considered the current defense against a trusting trust attack, and IIRC it has verified the lack of such an attack up to rustc 1.74, which is the latest version it currently supports. Presumably whenever gccrs comes online that will be yet another defensive layer. [0]: https://github.com/thepowersgang/mrustc https://github.com/thepowersgang/mrustc