Define what makes a rust program “real” lol.
Any kind of library that does a lot of low-level stuff (kernel syscalls, custom binary reprs, ffi) will have to use unsafe. But most applications built using these libraries rarely need to use unsafe at all, because the libraries act as safe wrappers to make sure the app developer isn’t accidentally violating invariants allowed by the “unsafe” keyword.
Another way to solve the issue is to have users and communities be instance-independent where the instances only provide storage for communities and users they want to support.