As you can see they're creating safe wrappers around the raw unsafe windows API which uphold the invariants. Microsoft should provide these as a crate.