And then there is .di files which complicates the matters further. But I agree with you. If the compiler _cannot_ or has _not_ confirmed it is @safe, a function should not be marked as @safe and be callable.