@astra yeah the recent Cloudflare outage was the result of some bad rust code. Even if the language paradigm gives you all the right tools, there's always a way to break guarantees with the equivalent of an "I know what I'm doing, discard the constraints" function that wasn't written by someone who knew what they were doing. You don't even have to get to using unsafe blocks to run into this, just abusing the structures meant to guarantee safety is enough.
Most ML-inspired languages with an "Option" or "Maybe" type that can contain Some(x) or None have a "get me the x or immediately start erroring" footgun convenience function, for example.