It's be nice to have CoreGraphics methods marked safe. This requires a breaking change, since we first need to modify null-ability to avoid the pervasive `cg_nullable` that's inserted everywhere.