The key requirement is memory safety, which would rule out Zig.

Last time I checked, Zig was breaking it's stdlib, so it's not an alternative imo