I wouldn't agree with this. In order to register a signal handler in Rust, you have to utter unsafe somewhere. That's the point at which you form the contract that your signal handler is correct. The fault is not with the safe code that allocates. The fault is with the creation of the signal handler.
It is true that Rust could model signal safety in some richer way, but that's just a matter of shifting where the contract is formed.
It is true that Rust could model signal safety in some richer way, but that's just a matter of shifting where the contract is formed.