I think the bigger issue is Debian switching out stable stuff for Rust versions, LDK/LNDK are already a no-go-zone just because Spiral pushes them.

Whatever NGO/intel op is bankrolling Rustifa and upstream of Spiral has far reaching tentacles. These are clearly not a technical stack choices because Rust sucks compared to alternatives like Zig or Go, but a cult/operational one.

People like to handwave off these concerns because the thing is open source, but that could well be part of a DoS attack of sorts, just as communists will set fire to keep people fighting fires rather than organizing resistance.

In reality it's more practical just to avoid Rust projects altogether than to audit them all. Debian falling may as well be shutting the internet off.