Comment by pizlonator

I think that Rust's clearly stated guarantee holds if you never say "unsafe".

That's still a clear statement, because it's trivial to tell if you used "unsafe" or not.