And it's not clear that safety has to be in the compiler: it could be in a static analysis tool, for example.