> sudo-rs: uses pam compiled with Yolo-C, so it's not actually safe

Well it is, it's just that it doesn't magically make PAM safe either.

We're not disagreeing about anything technical, I just think it's slightly unfair to say Rust isn't as safe as Fil-C based on that. It is as safe; it just can't automatically make all C code safer like Fil-C can (and CHERI, etc.).