The Problem with C++ Safety (Part 1): Why "It Works" Isn't Good Enough