He claims the system provides memory safety under data races. Does it not?