> Protection does not cover any global variables that f writes

Seems like this should raise a compiler error or panic on runtime.