In Rust, all FFI calls must be wrapped in unsafe blocks because the compiler cannot verify whether external functions comply with Rust's ownership and borrowing rules.