The area of Rust code that is unsafe is much, much smaller than the amount in equivalent C code, making it much more tractable to audit. I won't pretend that it's perfect, but it's not remotely comparable to C.
fn do_something() {
unsafe { ... }
}
// Somewhere in the program
do_something();