I'm having trouble finding the thread, but I believe the lead developer has stated that even in the kernel, the code only sits at something like 20-30% unsafe a

I'm having trouble finding the thread, but I believe the lead developer has stated that even in the kernel, the code only sits at something like 20-30% unsafe anyway, which is a huge reduction in overall vulnerable surface area.