The point I&#x27;m making is that, and this surprised me, the onus on soneone writing a module with unsafe code, to ensure it does not violate memory safety is <i>much higher</i> than I realized.<p>It is not &#x27;all rust&#x27; you must verify; just all rust that touches unsafe code.<p>You might argue this is nothing new, and indeed if you read this comment thread you&#x27;ll see the suggestion that the difference between verifying an entire module and verifying only the unsafe blocks in it is insignificant.<p>My point is that there is at least an order of magnitude more safe code than unsafe code in an unsafe module, and I suspect it is not scrutinized nearly as much as the unsafe code.<p>There are <i>a lot</i> of crates that use unsafe code in one form or another; and it troubles me (although no one else cares) that they are probably more dangerous than I realized.<p>&#x27;Just verify the unsafe blocks&#x27; is something I&#x27;ve literally heard people say.