For the sake of safety, can't we simply have a back-end that emits eBPF?

We do; most people don't just write eBPF by hand.

https://github.com/llvm/llvm-project/tree/main/llvm/lib/Targ...