Comment by User23

For systems programming languages, safe by default with scoped unsafe code is a Pareto improvement on unsafe everywhere.