The Rust Memory Safety Model explained