Unsafe Rust Is Not C