Can We Trust Rust?