Taking this at face value, please see the Rustsec advisory database for prima facie evidence that vulnerability enumeration is still necessary

https://rustsec.org/advisories/