It's impossible to use the guarantees provided by the `Pin` type without `unsafe` code, except in `async fn`.