How would you make a mistake? The only time signed vs unsigned matters is for comparisons and mul/div, and those have explicit names so you're never surprised

How would you make a mistake? The only time signed vs unsigned matters is for comparisons and mul/div, and those have explicit names so you're never surprised that 0xFFFFFFFF is less than 0 when doing signed_less_than().