It's been almost a decade since I used C++ and had to verify, but after some quick searching around it looks like it hasn't changed a ton since I last looked at it.

You can use smart pointers, and certainly you should, but it's a whole extra thing tacked on to the language and the compiler doesn't consider it an issue if you don't use them. Using new in C++ isn't like using unsafe in rust; in rust your code is almost certainly safe unless marked otherwise, whereas in C++ it may or may not be managed properly unless you explicitly mark a pointer as smart.

For your own code in new codebases this is probably fine. You can just always make your pointers smart. When you're relying on code from other people, some of which has been around for many years and has been written by people you've never heard of, it becomes harder to be sure everything is being done properly at every point, and that's where many of these issues come into play.

The part you’re missing is that while C++ does have newer safer ways of doing memory management, all the old ways are still present, in wide use, and are easier. Basically, C++ makes it easy to do the wrong thing and hard to do the right thing, and most codebases are built around the wrong things. It’s often easier to just rewrite it in rust than it is to refactor an existing code base, so if you’re going to expend that effort why not do it in a language that has stronger safety guarantees, a better dependency and build management system, and a growing community?

new 'a just dropped

That cannot be true, i used #![forbid(unsafe_code)]

Jokes aside: yes, Rust (and Go) wont magically resolve SQL Injections, but if we remember that about 70% of bugs are related to memory safety, using Rust (or Go) will make your code at least somewhat safer