You still need to audit the safe part for other bugs...

But yes, this is nice and we should (and probably will) have a safe mode in C too.