Language vision regarding safety guarantees

robofinch:

But I see one point of using Rust as precisely that ability to allow "this code may contain bugs" without causing arbitrarily large damage.

Rust protects you from bugs, but I don't envision anybody wanting to deliberately advertise that their code may be buggy and users have to protect themselves from such bugs. That would just seem like a rubbish library.