Lilypond's safe mode sounds a lot like Ghostscript's safemode, and that gets broken regularly like every six months, so I suspect it's similar to that.
Madness string 95310
If you cannot convince people of why it is needed, how can you possibly get them to agree on how to do it?