Leading to a lot of security bugs related to buffer overruns that were found automatically.

Leading some people to conclude erroneously that since they were the majority of security bugs found, they must represent the majority of all security bugs.

AI vulnerability scans will likely demonstrate they were just the tip of the iceberg.

As for that quote, optimistic as it may be, there's a kernel of truth to it. There are entire classes of vulnerability that are just not really feasible to create in Rust without an unsafe block or really going out of your way to Find Out.

My boldest claim for Rust would be, if you selected some random programmer of indeterminate skill and assigned them the task of writing a file parser that everyone on earth will use, I would absolutely pray they write it in Rust.

Fair point, my interpretation of overconfidence was that it leads to laziness, but that was indeed not the original point. If you feel something is protecting you, you drop your personal vigilance, vigilance takes effort, thus avoiding effort being a form of laziness.

Maybe a bit of a leap, but it's my brain and I have to live in here.

IMHO, the claim "A language empowering everyone to build reliable and efficient software" is ... uhm... optimistic.

A programming language that doesn't follow logic...

Are you re-writing curl in COBOL?

So the rust-rewrite will then be called „rurl“ I assume? Or „gurl“ in golang?

As a Rust programmer who started in C and knows all about nasal demons, I find that the Rust borrow checker is a constant reminder that "oops, I might have just tried to make a CVE right there."

That you must structure a Rust program of any complexity around memory safety is a constant reminder of what things are and are not safe to do. It's not cognitively free, to the frustration of many people new to Rust. So would gently push back on the idea that programming in Rust leads to laziness. Most languages do not complain at all - in C, you only get interested in safety if you get interested in safety.

I'd also hesitate to call any bug embarrassing, unless it was my own. We've all made some whoppers. These are process failures.