The rule prescribes to use --check, then manually review.

Rustfmt is a stable tool now. The risk does not justify the two step process IMO.