would it though - in a C++ app there'd be way less places where people could send you arbitrary code to run over the network ; and if you use any kind of high-level network library you'd be well pressed to have any kind of buffer overflow, as all the buffer handling is done in already-vetted libs, such as Qt, Boost, cpp-rest-sdk, etc

It's in the IPC invocation, so for this app in particular, it'd be in the exact same place.

I have a hard time seeing how. It seems to work by having some JS code to create a webview getting executed. In a pure C++ app there would be no place that would even be able to interpret that js, or any other "script language" in that pipeline.

Or, you know, reasomable people, with their own arguments, you knee-jerkly dismiss...

(Not that Rust's safety over C/C++ is an "opinion" or subject to argumentation).