[wjholden]

That's insightful. So where Rust might help you to program safely (write code free from certain classes of bugs), cargo has much/all the same supply-chain risks we would see in development ecosystems like pip and npm. And your point about operating in the shell is also well-taken.

So yeah, I must narrow my Rust shilling to just the programming piece. I concede that it doesn't protect in other operations of development.