Add safety comments.

These will soon be required by a lint. I've also marked some functions
as unsafe that were incorrectly marked as safe.

Bug: 290018030
Change-Id: I866c1016020daafef462869a9f15ae7f0acc81dc