Number of memory unsafety and race conditions I've had to debug in production in a year of use: zero.
pgrx is fantastic.