I think this is where safety and performance are actually in conflict.

I think guaranteeing a panic leads to much worse code gen in this case.