Yeah what I said is true of TS and C#, but not of Go.
replyGo’s situation is nuanced since a lot of Go code does rely on unsafe C or C++ deps, but I have no idea how generally true that is. Also Go’s protections fall apart under certain races, which isn’t true in Fil-C.
Races in Fil-C allow access to one object through a pointer to a different object if there's an attacker-controlled offset involved.
replyFil-C's safety guarantees therefore fail to apply in this situation.