I think rust is a singularly poor choice to write a kernel, due to the datastructures required, poor support and interop between libraries and nostd, in the long run macros obscuring code and making understanding timing attacks difficult, e.g. but that's just my opinion... If you have the resources of google, you might as well write it in another language and apply a proof solver for security assurances (or just use SeL4).