Private unsafe fields are a poorly motivated feature

scottmcm:

The point of the RFC, as I see it, is to solve the Vec::set_len problem.

If that’s indeed the primary motivation, I’m wondering why the RCF turned out choosing the “all access is unsafe” option over allowing reads.