I have to say I appreciate when folks like yourself explain the subtle flaws in very simple code.

It’s been really eye opening as I do security analysis of C++ projects how many foot guns are in a ton of codebases that now need so much scaffolding to handle properly, after they’ve done damage.

With Rust, my first pass is usually the right pass.