Minor point, but would it be possible to expose an `unsafe` version of these functions that doesn't perform any length-check?