This story makes me wonder if it's better to use Ada/SPARK than Rust, from a safety perspective.