Seems like Rust unsafe could be improved without changing the language design.