why is only the `Posix` constructor `@trusted`? Is this intentional?