Comment by pjmlp

Which is why one of the security measures in C++26 is to make bounds checking idiomatic, finally.