This is a good way to ensure a relatively slow (by comparison) security review for your PRs as every dumb string manipulation and every allocation needs to be checked.