> but it's trivial to get a bogus reference in C++

How? Honestly curious. (You can certainly reinterpret_cast something and ignore all warnings, but is that all?)