As long as the memory-safe subset of Rust is used exclusively.