If that's the right approach, then it would be useful to make that library public as a crate, because writing such hardened code is generally useful. Possibly as a step before inclusion in the rust stdlib itself.

Agreed. (This approach feels like a cousin of Parse, Don't Validate.)