typing: use `is_null_safe`