std span is not bounds checked.