This starts to open up a whole topic that I though about including but ultimately decided not to: How do we deal with unsafe code in our dependencies? This gets into all sorts of tools like cargo-geiger and blessed.rs and things like that.

Luckily, I think the Python/Java metaphors work well here. Rust apps have to worry about unsafe code in their dependencies, like Python and Java apps have to worry about C code in their dependencies. So hopefully not _too_ much is lost by leaving those questions for another article. Maybe I should add another footnote though.