The rewrite has NOTHING to do with security and is all about licensing.
coreutils are GLPv3
rust-coreutils are MIT
Yeah, broad tivoisation and patent clauses make it a problem, because making any patent litigation on unrelated grounds has potential to lose ability to ship the entire OS.
Canonical is trying to position Ubuntu as a relevant player in the embedded space.