"If the implementation pendantically avoided Rust's unsafe feature"
This isn't doable. Following Rust's ownership and lifetime rules requires explicit annotations ... they can't be inferred by the compiler, or else the Rust compiler would already be doing that.
