It seems like you&#x27;re assuming the post is saying that you need formal verification to write safe Rust? I don&#x27;t think that&#x27;s the case.<p>Note that the blog post is explicitly in the context of formally verifying Rust and its stdlib. This is not something that&#x27;s necessary for a &quot;good enough&quot; guarantee that stuff works and is safe. The conclusion you can make is that formally verifying Rust is just as hard as C++ (I&#x27;m not sure I agree with this either, but it&#x27;s really irrelevant), but this doesn&#x27;t make Rust a worthless language since formal verification is not what you care about for everyday safety guarantees.<p>&gt; If the burden of &#x27;safety&#x27; is formal proof of the entire module, then you&#x27;re (surely) no better off than using C++ and doing exactly the same thing.<p>Well, formal verification is nice, but it&#x27;s not <i>necessary</i>.<p>Take the Vec&lt;T&gt; interface for example. There are a couple of unsafe methods in it, and the invariant &quot;len is always a valid length&quot;. It&#x27;s easy to check if len is being modified elsewhere. It&#x27;s easy to reason about these invariants. And it&#x27;s easy to reason that it upholds the invariants that Rust expects for safe functions. <i>Formal</i> verification is harder, but practical verification is easier since it&#x27;s contained in a small surface area.<p>On the other hand, there&#x27;s no &quot;containment of unsafety&quot; in C++ and other languages and even practical verification can be hard especially when generics get in the way.<p>&gt; In other words, if your rust program has any module in any dependency that has unsafe code (ie. every rust program), it is potentially unsafe, regardless of the borrow checker (because some code path may invoke a &#x27;safe&#x27; function that has not be formally verified to be safe, and results in undefined behaviour despite being safe).<p>&quot;Potentially unsafe&quot; for a very small probability. You don&#x27;t <i>need</i> formal verification to be convinced that something is safe.