I think @safe guarantees are much stronger if you _start_ with @safe main and only interact with system code via small @trusted gateways. If it is @system code calling @safe, low-level trickery it allows is just too powerful to avoid with reasonably fast checks.

Reply via email to