Cargo is a great package manager and hasn't suffered from the same problems. I'll take it.

Yet.

Does cargo contain any mitigations to prevent a similar attack?

Now hopefully no distro signing keys have been compromised in the latest attacks...