DIP 1021--Argument Ownership and Function Calls--Final Review

[Walter Bright]

On 9/24/2019 1:30 AM, Olivier FAURE wrote:
> The problem is, since the compiler can't check that non- at live functions conform 
> to the @live invariants, it has to trust the developer, which severely weakens 
> @safe (if nothing else, because it makes it possible for someone to do a memory 
> corruption in a codebase with no @system or @trusted functions).

It wouldn't be any less safe than it is now. Remember, @live adds a layer of 
more checking, not less.