I think the part that uses `unsafe` and can break Pin if done wrong is the implementation of the smart-pointer type, not its use.