> and that doesn't square well with trying to write safe(r) Rust abstractions over them.

Or just using those kernel APIs, period.