This comment makes no sense to me.  not safe doesn't imply not trustable at all.  What about generating a random UUID is in any way memory unsafe?