Far from bug proof. You can write as many logic bugs as you want (as that’s what happened here), but it’ll save you from a common class of potentially devastating memory safety and data race bugs in safe Rust.