@safe code is just as fast as @system code. You might be thinking about the switch that turns runtime array bounds checking on/off. Yes, safety should be the default, but we don't want to break existing code.