Nit: C/++ is safer than Rust unsafe. There are constraints (no aliasing) that must be upheld in unsafe.