OTOH, in many of the cases where “isn’t safe” IS relevant, the developer believes it isn’t.

Buffer overflows are never irrelevant. You might get away with it until the day it blows up or someone manages to exploit it. Or you could code it correctly the first time.