It's a little bit of a shame that *all* functions are entirely unsafe blocks, can this unsafety not be contained to particular functions?