Apparently, it is possible to fake static with safe code . Is it a clear limitation of NLL?
No, that's a long-standing known soundness bug. Bugs happen, and not all are easy to fix.