the worst kind? probably not. The worst kind is the vulerability that is a logic error, which no language catches for you, which can leave unskilled attackers accidentally breavhing your whole system. RCE takes effort usually, exploiting a logic error not so much.

For example, rust happily lets you access a database before checking that the user's auth token is valid - absolutely nothing prevents you from that.