A more interesting question is why it was not possible to use compile time borrow checking in this particular case. It shows how valuable the borrow checker is when you can use it.

I'd rather use the C++ app that doesn't crash than the Rust browser that crashes safely.

The last time I had firefox crash was over a decade ago.