> Andrew has already stated publicly that Zig should not be used in production until v1 due to security vulnerabilities in the standard lib.

Andrew has made the claim a couple years ago that Zig should not be used in production yet. The part about security is not at all part of anything he ever claimed, and is in fact only something that you went crazy about on your own.

See: https://news.ycombinator.com/item?id=34669045

While I can understand holding real hard onto your opinion, please don't put words in people's mouths, especially when the person in question does not share your position on the matter at all.