The point is that you limit where you're doing that. Like just as an example - I can write an allocator and toggle register bits etc. All of that requires unsa

The point is that you limit where you're doing that. Like just as an example - I can write an allocator and toggle register bits etc. All of that requires unsafe code, raw pointers, etc. But I can then build on top of that in safe Rust, with all the guarantees that brings. I still have to check that the unsafe allocator or whatever work soundly, but Rust checks the stuff on top of it.