I wonder if it would be interesting to introduce a "safe" annotation to Rust, which would fail compilation if any code the function calls is unsafe.
If you're hoping to enforce across all called functions, it's likely to be unworkable since a lot of stdlib ends up calling unsafe code.
#![forbid(unsafe_code)]
There's also things like `cargo gieger` that will tell you how much unsafe code your dependencies have.