If you could get there that way with Rust’s unsafe blocks then you could get there that way with C++

probably true. I think thing doing the heavy lifting is an adversarial loop on the generated code to red team it repeatedly before merge.