As a reminder - the issue is that we can't prove that the Rust compiler is malware free, because it is compiled with itself. The submitted issue is here: https://github.com/rust-lang/rust/issues/48707