It's as safe as LLVM IR is safe, assuming you trust the LLVM IR -> C translation step.