Perhaps this is just the "Muhammad Wang" fallacy but I feel like a lot of the people I see complaining about Rust's unsandboxed build scripts are also the people advocating for more hand-written makefiles.

I just don't understand how these people don't realize that nontrivial build orchestration without arbitrary code execution isn't possible. Why are you building any code you believe might be malicious outside of a VM or container? Are you stupid?

...do you know how compilers work?