Remember the XZ backdoor? Or do you mean that Rust build script attacks are less likely? (Probably true but not much comfort)