I wonder if Rust can do that, by using data lifetimes incompatible between actors, thus protecting them from being passed around beside sending.

I also don't see why a namespace, like that of a function, won't be enough isolation from peeking between actors.

Somehow Scala got Akka, the actor framework, without having to tailor the language for that.