> alloc/free safety is provided by the linear types, like with Rust lifetimes

Rust's move/ownership semantics are based on linear types, where as its lifetimes are based on regions. ATS has linear types, but not regions.