Rowhammer is a very good point. Hrm.<p>Rowhammer is basically mitigated if you don&#x27;t let untrusted processes run CLFLUSH, right? That&#x27;s sort of orthogonal to your choice of programming language (which might be your point, but then, I&#x27;m not sure I believe that Erlang or unikernels solves this either). It requires a world in which you&#x27;ve got something Native Client-like wrapping all userspace processes, which definitely seems like a good goal to work towards, and also seems easier to implement reliably in Rust than in C.