Safety includes everything that could cause UB. Things that cannot be safely expressed are forbidden. Async too: you're not allowed to make cancellation-unsafe

Safety includes everything that could cause UB. Things that cannot be safely expressed are forbidden. Async too: you're not allowed to make cancellation-unsafe futures that could keep using a buffer after being dropped. This is why io_uring abstractions only work with custom buffer pools and not slices.