@trust is an encapsulation method, not an escape

[Tobias Pankrath via Digitalmars-d]

On Friday, 6 February 2015 at 17:02:44 UTC, Wyatt wrote:
> On Friday, 6 February 2015 at 15:48:45 UTC, Ola Fosheim Grøstad 
> wrote:
>>
>> 2. @trusted sections are written without dependencies
>>
> This really won't happen unless statically enforced because 
> humans are involved.
>
>> 3. @trusted are formally proven safe
>>
> ...by humans?
>
>> 4. @trusted functions rarely change
>>
> Is this so?  Data, please.
>
>> 5. @trusted is 0-2% of the codebase
>>
> In Phobos, you mean?  You've checked?
>

At least I expect the amount of @trusted in phobos to be much 
higher than in normal user code.