Earlier quoted context omitted.
Not all Rust programs are thin layers around libraries like FFMPEG. Why would you assume that? Also, "if it can't be 100% safe right now all at once, then why even bother?" isn't very pragmatic.
> Why would you assume that? It might not be using FFMPEG, but gdi32.dll, winsock2.dll, libc, etc. Correct? Unless you run on 100% bare-metal, the "safe" code is still a tiny fraction. What if my linked C library returns an invalid pointer? Rust will still make the assumption it might be valid and play along. (that might be the reason why Rust likes to compile libraries/dependencies from source) > Also, "if it can't…
The 1% of code that is your own will, upon creation, have been run precisely zero times, so there is no probabilistic argument to be made for its correctness. Safe languages let you exclude entire categories of mistakes even when your code hasn't been run yet, which seems obviously valuable.