Do you have plans for handling C FFI without "unsafe"? Will it require some sort of extension module written in C/C++/Rust?
If this ever becomes a production thing, then I can worry about FFI, and I'll probably just follow what managed languages do here.