1. Write an app in rust.
2. Use a rust library in that app, via the native rust interface (using c interfaces negates a lot of the pros of rust).
3. Dynamically link that app to the distro repository version.
4. Have the distro apply security updates to that library without recompiling my app.
5. Ignore cargo completely.
As a user I want to:
1. Not download and install multiple copies of common rust libraries (as is the cargo norm).
2. Not be in doubt whether a particular application is using the latest patched libraries.
It seems that rust community has learned from the mistakes of c, c++, and java. But they failed to learn the successes as well.