My organization mainly works in C++ and go, but we are moving slowly towards Rust.
One main area of concern is keeping technology used confidential. C++ has commercial libraries that gives the right to hide if we used them. And in go, standard library pretty much has everything so we don't have to declare anything what was used (clarification: it is distributed with Go's license).
With Rust, on the other hand, it appears most of the useful libraries have independent crates which requires declaration I believe. And there are no pro paid crates yet.
How do companies that keep these things confidential use Rust in their distributed software code?