Synchronized FFI access to POSIX environment variable functions

If you believe get_var is unsafe, can you write a self-contained Rust program annotated with a #![forbid(unsafe_code)] attribute which demonstrates the unsafety, without using set_var or remove_var? (which we mostly agree should be marked unsafe)