Comment by simonw

> But when the Rust port merged to main, the state of the code was very, very bad. There were 13,000 instances of `unsafe`, no Miri tests at all, and, sure enough, it exposed UB in safe Rust.

I mean yeah, that's what this whole post is about. It's about the process of going from that original state to something that's now shipping in production.