> Also we’re bringing NPM style supply chain problems to the kernel now?

Nope. They've thought that through.

(In fact, cargo is only used to build test helpers. https://github.com/Rust-for-Linux/linux/blob/rust/Documentat...)