For the sake of safety, can't we simply have a back-end that emits eBPF?