Rust apparently wants to reverse its warning logic and instead of banning unsafe{} inside unsafe fn(), they want to require it and make it a hard error.