gutf8: Assert that written memory stays in bounds
You may expect funny effects from passing invalid UTF-8, but not that funny. The assert will probably be a better and more immediate confirmation of an error than invalid writes under the address of the string copy.