I see there are some downvotes here, which I don&#x27;t think are deserved. It&#x27;s true that at some level of your stack you&#x27;re going to have some code that&#x27;s just poking bytes into buffers, and that generally takes some manual effort to verify.<p>For what it&#x27;s worth, I&#x27;d expect this sort of thing to be walled up behind an `unsafe` block in Rust, which if nothing else would lend increased scrutiny in an audit.