[milliams]

I'd argues it's less about not having any `unsafe` code, but rather about being able to easily identify where that unsafe code lives. In a C or C++ codebase, you'll also have "unsafe" code but there's no easy way of identifying and locating it.

This aids both auditing and also targeting your work to reduce it if desired.