1. GNU coreutils is ancient as is sudo. There's bound to be a metric ton of legacy code in there for all sorts of bizarre edge cases encountered across many platforms and systems over decades. Duplicating all the C code into RUST is a nightmare and the evidence is found in the delays with the uutils being deployed.
2. This is not about security it's about hijacking the GNU General Public License.
I was going to upgrade an LTS server to this new release but now I am seriously considering making a different Linux distribution choice. Ditching Ubuntu LXD in favor of Incus as well. Yes, I know you can install GNU coreutils to override the rust-coreutils (uutils) and even GNU sudo but I want no part of Rust replacements until they have had several years behind them.
I might just go with Fedora or NixOS without Flakes. Yes, I know Fedora is providing rust-coreutils but it is still optional and not the default like it is with Ubuntu. With NixOS it is declarative, so I get to define what I want regardless. Another option is GUIX but sadly, their package list means I would have to package things myself in GNU Guile Scheme way too often. LISP is fun but I don't want to do that on a server.