I'm glad we're finally opening this can of worms. IMO, it's worth whatever breakage it causes, or to turn that around, no price is too high to have @safe be the default. It's also a great PR point for D to be memory safe by default.