Out of curiosity, have you hit examples in which the runtime cost of Rust's safety was problematic – and couldn't be worked around without losing either safety or clarity?
The most obvious case is bound checking. If you have a code with direct array indexing you have to use unsafe code or loose a little bit of performance.