An important point: if you provide a safe wrapper around some unsafe code it's up to the programmer to ensure the above is true.