I don’t understand how it is supposed to run C program safely
You hire decent C programmers.
So, it doesn’t, then?
As far as I can tell it doesn’t provide any additional safety to the applications. README speaks only about benefits of using Rust only in the context of the kernel development.