Microsoft wants safer C# without turning it into Rust