JPEG XL decoding is embarrassingly parallel at the tile level. A 4K image has dozens of independent tiles that can decode simultaneously. The hard part is the output: all those tiles write to the same output buffer, and Rust's borrow checker won't let multiple threads hold &mut references to the same buffer — even if they write to non-overlapping regions.
We wanted full tile-level parallelism with #![forbid(unsafe_code)].