OK, thank you all. It's actually not very convenient to think about these things all the time. Over the years, I've gotten used to using `@system` by default. But now it turns out that you can almost always use `@trusted`.