That's not how unsafe works. Marking a function as unsafe is more or less solely a decision of the developer (though foreign functions are implicitly unsafe), and an unsafe block does not taint the enclosing function or it wouldn't be possible to build safe interface from unsafe building blocks, making the whole thing serve a completely different purpose.