The key difference as outlined in the article is that Box::new cannot fail in Rust, but the underlying malloc can.

In userspace it is rare enough that a Rust panic is considered acceptable behavior, but this is not the case for the kernel.

But, it is controllable for sure