In safe Rust, yes, you must prove it. But in unsafe Rust, it's up to you. It's the exact same thing.