Zero-days only show that someone wasn't willing to put in the effort to audit the C++ code. If they won't do that, how will they put in the effort to write it in Rust?