`SAFETY` comment or remove all code that could panic

Self-explanatory. Subtask: replace all instances of `&slice[n..m]` with `slice.get(n..m)` and similar slice operations. This makes it much more explicit when slice or `Vec` accesses might panic.