Using UnsafeIO, however, leaves a creepy unsafe feeling...

I don't fully understand though why it is unsafe. Doesn't hGetContents do the exact same thing (i.e. reading from IO returning a lazy string) but does not require UnsafeIO.