“Running out of memory simply MUST NOT cause an abort.”
Torvalds didn’t reject Rust. He rejected Rust’s habit of panicking when an allocation fails. A user-space tool can crash and restart. A kernel that panics takes the whole machine down with it. Rust gets in only if it learns to fail the way the kernel already does.