guideline

Minimize the use of the attribute Unchecked_Access, preferably isolating it to package bodies.

Use the attribute Unchecked_Access only on data whose lifetime/scope is "library level."

The accessibility rules are checked statically at compile time (except for access parameters, which are checked dynamically). These rules ensure that the access value cannot outlive the object it designates. Because these rules are not applied in the case of Unchecked_Access, an access path could be followed to an object no longer in scope.

Isolating the use of the attribute Unchecked_Access means to isolate its use from clients of the package. You should not apply it to an access value merely for the sake of returning a now unsafe value to clients.