My point is focusing on the language is inherently missing the point, which is simply incorrect code.
Of course, not checking if a user has permissions to perform an operation is not something Rust or any language will protect you against, but come on it's almost 2026 and we still are talking about use after free...