The original reason to design it (instead of the previously inferred bivariance) was so that unsafe code that really does not want bivariance, and will be unsound if it will be used, will remember to consider that.

It doesn't use unsafe under the hood, rather it's compiler magic.