The return value from an access shim must not be used outside the lifetime of the expression in which the shim is invoked.
FastFormat, Pantheios and the other libraries and programs (I know of) that make use of strings observe this rule, and all is well.