Parameterized type are NOT inherently unsafe