Comment by ActorNightly

>Human validation is insufficient and error prone,

Basically, if you assume thats impossible for humans to be correct, or that its impossible to write correct memory safe C code, you start down the path that leads to things like Java, Haskell, and now Rust. And then when nobody takes you seriously, you wonder why - well, its because you are telling people who know how to write correct and memory safe C code that we are insufficient and error prone

>Kernel modules aren't that special.

By definition, they interface with the core kernel code. They are not core kernel code