> So describing the situation as "nobody knows what 17% of the top crates.io packages do" is an overstatement.

Noting that you willfully cut the qualifying "virtually" from that quote, thereby transforming it to over-stated:

> Let me rephrase this, 17% of the most popular Rust packages contain code that virtually nobody knows what it does