> How can one possibly square those two pieces of data to point at rust somehow fixing the "memory safety vulns"?

The code base contains Kotlin and Java as well