The docs mention that space for overwritten variable-sized values in the buffer is not reclaimed:
The overridden space is never recovered, causing buffer size
to grow indefinitely.
Is the garbage at least zeroed? Otherwise seems like it could "leak" overwritten values when sending whole buffers via memcpy