But can't you at least surmise that, as long as you can independently show that the code in the unsafe blocks only affects safe code in the intended manner, you

But can't you at least surmise that, as long as you can independently show that the code in the unsafe blocks only affects safe code in the intended manner, you can reason about the unsafe behavior in a more modular way? Kind of a memory safety equivalent to what structured programming did for control flow.