Наверное им задавали такой вропрос овер 9000 раз, так что ребята вынуждены были написать ответ:
https://github.com/microsoft/verona/blob/master/docs/faq.md#why-have-you-implemented-project-verona-in-c-rather-than-a-safe-languageWhy is the Verona runtime implemented in C++?The runtime is inherently using a lot of unsafe code: it is producing the abstraction from the raw bits and bytes into the abstraction that the language uses. It is also inherently racy providing numerous lock-free datastructures for messaging and scheduling work. The runtime is also providing memory management concepts:
the allocator, snmalloc, we designed for the runtime
the management of regions of memory
reference counting of various runtime concepts
...
Hence, the implementation requires very low-level access to the machine, that cannot be found in any safe language that we know of. When we started the project, C++ has the best tooling for handling unsafe code. Rust would be an interesting choice to understand what abstraction we could surface to Rust. As the concepts we are surfacing are different to Rust's type system it is unclear how beneficial this would be.
Ultimately, we want to verify the runtime against a formal specification, but this is a massive undertaking and is on the boundary of current verification research.