Aren’t most CVEs out of bounds writes/reads?

Rust helps prevent that, so more secure software seems like a good thing

So long as they don’t abuse unsafe that is