Then why is Box::leak not marked unsafe?