There's necessary and well-encapsulated `unsafe` code in the standard library. It's a tool.